General

  • Target

    3b15778595cef00d1a51035dd4fd65e6be97e73544cb1899f40aec4aaa0445ae

  • Size

    1KB

  • Sample

    241203-kgylkasrhr

  • MD5

    51a900215c41691542f83df8cb053ef7

  • SHA1

    efaca58b61cb70b87a075fad593c81beb757ad7e

  • SHA256

    3b15778595cef00d1a51035dd4fd65e6be97e73544cb1899f40aec4aaa0445ae

  • SHA512

    15ff74bcc1f503f31cc8bff6fad446a1f5a7c774b13c623071ceb480bddef28d7a942f1e15b68a98eaa6e481a581c6792b734075011bd96a34fcbf0e256aa5b1

Malware Config

Targets

    • Target

      3b15778595cef00d1a51035dd4fd65e6be97e73544cb1899f40aec4aaa0445ae

    • Size

      1KB

    • MD5

      51a900215c41691542f83df8cb053ef7

    • SHA1

      efaca58b61cb70b87a075fad593c81beb757ad7e

    • SHA256

      3b15778595cef00d1a51035dd4fd65e6be97e73544cb1899f40aec4aaa0445ae

    • SHA512

      15ff74bcc1f503f31cc8bff6fad446a1f5a7c774b13c623071ceb480bddef28d7a942f1e15b68a98eaa6e481a581c6792b734075011bd96a34fcbf0e256aa5b1

    • File and Directory Permissions Modification

      Adversaries may modify file or directory permissions to evade defenses.

    • Executes dropped EXE

    • Reads AppArmor ptrace settings

      Discovery of allowed ptrace capabilities by AppArmor.

    • Enumerates running processes

      Discovers information about currently running processes on the system

    • Reads hardware information

      Accesses system info like serial numbers, manufacturer names etc.

    • Reads network interface configuration

      Fetches information about one or more active network interfaces.

MITRE ATT&CK Enterprise v15

Tasks