b6686c28c84ae5d98909eaf165321138eb24402b6e9aa24fd36f116897e5da4a | Triage

Sharing

General

Target

b6686c28c84ae5d98909eaf165321138eb24402b6e9aa24fd36f116897e5da4a
Size

3.7MB
Sample

241203-vr39xazrdk
MD5

9b6374e8198a2279696951fef7c67eac
SHA1

e44cdba9147a09fe757ddb1b5495b6b2ad54751d
SHA256

b6686c28c84ae5d98909eaf165321138eb24402b6e9aa24fd36f116897e5da4a
SHA512

f36e1002fc917069a007c94601e375124010ba771e8368ca321aed043794746eb09c09f75e2f916fa16cf84197379806d2cb34eabc15856a82ba326b47965025
SSDEEP

98304:PYeQiakIlp0o4KNM12Piwsm0X+eOQefFNNoV8NM:c5goxg2PiwRHTnOqM

Score

7^/10

defense_evasion discovery linux persistence privilege_escalation upx

Malware Config

Targets

- Target
  
  b6686c28c84ae5d98909eaf165321138eb24402b6e9aa24fd36f116897e5da4a
- Size
  
  3.7MB
- MD5
  
  9b6374e8198a2279696951fef7c67eac
- SHA1
  
  e44cdba9147a09fe757ddb1b5495b6b2ad54751d
- SHA256
  
  b6686c28c84ae5d98909eaf165321138eb24402b6e9aa24fd36f116897e5da4a
- SHA512
  
  f36e1002fc917069a007c94601e375124010ba771e8368ca321aed043794746eb09c09f75e2f916fa16cf84197379806d2cb34eabc15856a82ba326b47965025
- SSDEEP
  
  98304:PYeQiakIlp0o4KNM12Piwsm0X+eOQefFNNoV8NM:c5goxg2PiwRHTnOqM
Score

7^/10

defense_evasion discovery persistence privilege_escalation
- File and Directory Permissions Modification
  Adversaries may modify file or directory permissions to evade defenses.
  defense_evasion
- Modifies systemd
  Adds/ modifies systemd service files. Likely to achieve persistence.
  persistence privilege_escalation
- Write file to user bin folder
  persistence
behavioral1

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

XDG Autostart Entries

Create or Modify System Process

Systemd Service

Privilege Escalation

Boot or Logon Autostart Execution

XDG Autostart Entries

Create or Modify System Process

Systemd Service

Defense Evasion

File and Directory Permissions Modification

Linux and Mac File and Directory Permissions Modification

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

defense_evasiondiscoverypersistenceprivilege_escalation