General
- Target bins.sh
- Size 10KB
- Sample241101-t2dlka1lez
- SHA256 dd275916fd545bb337c4158ddec51c83a5e3977e834a6904e8a9ca2dc07d95b9
- MD5 d2e43e4bb24f3d8e0b558d8ff45d9ad9
- SHA1 bfe62faa50011e7679468ea29a1805bd53b6d732
- SHA512 c4f9536a82fc92abfbaac935d07b45f58d87124a38f6234182e6cafbeb5618acff1b1faa809eb94a43020dbba6c914d7f8549cf7e7a8b38aaf0fe1dffb0f59f9
- SSDEEP 192:cGIQfm6OJDbO2BLrSFZ+fVKyXLrSFZ8bnKyyIQfm6EDO:cTJDbO2b/xDO
- MD5 SHA1 SHA512 SSDEEP
Static task
static1
Behavioral task
behavioral1
Sample
bins.sh
Resource
ubuntu1804-amd64-20240611-en
Behavioral task
behavioral2
Sample
bins.sh
Resource
debian9-armhf-20240611-en
Behavioral task
behavioral3
Sample
bins.sh
Resource
debian9-mipsbe-20240418-en
Behavioral task
behavioral4
Sample
bins.sh
Resource
debian9-mipsel-20240611-en
Malware Config
Targets
-
- Target bins.sh
- Size 10KB
- SHA256 dd275916fd545bb337c4158ddec51c83a5e3977e834a6904e8a9ca2dc07d95b9
- MD5 d2e43e4bb24f3d8e0b558d8ff45d9ad9
- SHA1 bfe62faa50011e7679468ea29a1805bd53b6d732
- SHA512 c4f9536a82fc92abfbaac935d07b45f58d87124a38f6234182e6cafbeb5618acff1b1faa809eb94a43020dbba6c914d7f8549cf7e7a8b38aaf0fe1dffb0f59f9
- SSDEEP 192:cGIQfm6OJDbO2BLrSFZ+fVKyXLrSFZ8bnKyyIQfm6EDO:cTJDbO2b/xDO
- MD5 SHA1 SHA512 SSDEEP
-
File and Directory Permissions Modification
Adversaries may modify file or directory permissions to evade defenses.
-
Executes dropped EXE
-
Renames itself
-
Creates/modifies Cron job
Cron allows running tasks on a schedule, and is commonly used for malware persistence.
-
Enumerates running processes
Discovers information about currently running processes on the system
MITRE ATT&CK Enterprise v15
Defense Evasion
File and Directory Permissions Modification
1Linux and Mac File and Directory Permissions Modification
1Virtualization/Sandbox Evasion
1System Checks
1