General
- Target 5b56bb90601a55fb49bea46f524a47570b4a0a9117bd7d545f406a78d2f3f2c5
- Size 90KB
- Sample241122-pbe99azpgw
- SHA256 5b56bb90601a55fb49bea46f524a47570b4a0a9117bd7d545f406a78d2f3f2c5
Score
10/10
Malware Config
Targets
-
- Target 5b56bb90601a55fb49bea46f524a47570b4a0a9117bd7d545f406a78d2f3f2c5
- Size 90KB
- SHA256 5b56bb90601a55fb49bea46f524a47570b4a0a9117bd7d545f406a78d2f3f2c5
Score7/10File and Directory Permissions Modification
Adversaries may modify file or directory permissions to evade defenses.
Loads a kernel module
Loads a Linux kernel module, potentially to achieve persistence
Modifies init.d
Adds/modifies system service, likely for persistence.
Write file to user bin folder
MITRE ATT&CK Enterprise v15
Persistence
Boot or Logon Autostart Execution
1Boot or Logon Initialization Scripts
1RC Scripts
1Privilege Escalation
Boot or Logon Autostart Execution
1Boot or Logon Initialization Scripts
1RC Scripts
1