97ad97cf7e32f4f744878694c69bebee659c9b30b49f4fdd6bf0abcc4fea1b09

General

Target
ng.sh
Size 558B
Sample250108-tmceysvpet
SHA256 97ad97cf7e32f4f744878694c69bebee659c9b30b49f4fdd6bf0abcc4fea1b09
MD5 37387c961cee04dbead5c179cc0dc6ae
SHA1 9defe3c61b648ffba306df9b33831699c403a2ef
SHA512 d4dde3df6b7aa92af0721c444ed45500efb1ddaf8f5d2b33faf196e06e9573556c9a6ab2b92dcbd76ce6ff8f362aafd8445e4d73b26fddbe8bacf8632a38aeea
MD5 SHA1 SHA512

Score

9^/10

Malware Config

Targets

- Target
  ng.sh
- Size 558B
- SHA256 97ad97cf7e32f4f744878694c69bebee659c9b30b49f4fdd6bf0abcc4fea1b09
- MD5 37387c961cee04dbead5c179cc0dc6ae
- SHA1 9defe3c61b648ffba306df9b33831699c403a2ef
- SHA512 d4dde3df6b7aa92af0721c444ed45500efb1ddaf8f5d2b33faf196e06e9573556c9a6ab2b92dcbd76ce6ff8f362aafd8445e4d73b26fddbe8bacf8632a38aeea
- MD5 SHA1 SHA512
Score

9^/10

defense_evasion discovery
- Contacts a large (36601) amount of remote hosts
  This may indicate a network scan to discover remotely running services.
  discovery
- Creates a large amount of network flows
  This may indicate a network scan to discover remotely running services.
  discovery
- File and Directory Permissions Modification
  Adversaries may modify file or directory permissions to evade defenses.
  defense_evasion
- Executes dropped EXE
- Enumerates running processes
  Discovers information about currently running processes on the system
behavioral1 behavioral2 behavioral3 behavioral4

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

File and Directory Permissions Modification

1

T1222

Linux and Mac File and Directory Permissions Modification

1

T1222.002

Credential Access

Discovery

Network Service Discovery

2

T1046

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Contacts a large (36601) amount of remote hosts

Creates a large amount of network flows

File and Directory Permissions Modification

Executes dropped EXE

Enumerates running processes

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4