Overview

overview

10

Static

static

10

5b56bb9060...f3f2c5

ubuntu-24.04-amd64

7

Resubmissions

22-11-2024 12:09

241122-pbe99azpgw 10

22-11-2024 12:08

241122-pa2rvszpf1 10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5b56bb90601a55fb49bea46f524a47570b4a0a9117bd7d545f406a78d2f3f2c5

  • Size

    90KB

  • Sample

    241122-pbe99azpgw

  • MD5

    563205e6c072588081ca841fc18d9f71

  • SHA1

    1f7509a4c3456b8d29d504852648efface0e60cf

  • SHA256

    5b56bb90601a55fb49bea46f524a47570b4a0a9117bd7d545f406a78d2f3f2c5

  • SHA512

    e55bbe2f62f898a1ee483fbed038de6d987c1cbac6688b3d12bf0a4f36a3d503abf474df82495d6b3e0c4ce60b01869bc497855879b6012c2cda9afba93b55f8

  • SSDEEP

    1536:0loZZa3wD/CqhX9tLPGcMXNPsVzqbvGxHyAG/jZaZSibj7l3i2XE51SRhtQR/ad:0lEkwD/Cq9XOW+bvGy9csEjh3zUyh2ad

Score
10/10
defense_evasiondiscoverylinuxpersistencerootkit

Malware Config

Targets

    • Target

      5b56bb90601a55fb49bea46f524a47570b4a0a9117bd7d545f406a78d2f3f2c5

    • Size

      90KB

    • MD5

      563205e6c072588081ca841fc18d9f71

    • SHA1

      1f7509a4c3456b8d29d504852648efface0e60cf

    • SHA256

      5b56bb90601a55fb49bea46f524a47570b4a0a9117bd7d545f406a78d2f3f2c5

    • SHA512

      e55bbe2f62f898a1ee483fbed038de6d987c1cbac6688b3d12bf0a4f36a3d503abf474df82495d6b3e0c4ce60b01869bc497855879b6012c2cda9afba93b55f8

    • SSDEEP

      1536:0loZZa3wD/CqhX9tLPGcMXNPsVzqbvGxHyAG/jZaZSibj7l3i2XE51SRhtQR/ad:0lEkwD/Cq9XOW+bvGy9csEjh3zUyh2ad

    Score
    7/10
    defense_evasiondiscoverypersistencerootkit

    • File and Directory Permissions Modification

      Adversaries may modify file or directory permissions to evade defenses.

      defense_evasion

    • Loads a kernel module

      Loads a Linux kernel module, potentially to achieve persistence

      rootkit

    • Modifies init.d

      Adds/modifies system service, likely for persistence.

      persistence

    • Write file to user bin folder

      persistence
    behavioral1

MITRE ATT&CK Enterprise v15

Tasks