General
- Target avtech.sh
- Size 1KB
- Sample251018-a97ptsar7z
- SHA256 e090590a442cb44deb6bf562cc242da71d41f8c9e206f077b3da26f7a6cd90be
Score
9/10
Malware Config
Targets
-
- Target avtech.sh
- Size 1KB
- SHA256 e090590a442cb44deb6bf562cc242da71d41f8c9e206f077b3da26f7a6cd90be
Score9/10-
Contacts a large (22530) amount of remote hosts
This may indicate a network scan to discover remotely running services.
-
Creates a large amount of network flows
This may indicate a network scan to discover remotely running services.
-
File and Directory Permissions Modification
Adversaries may modify file or directory permissions to evade defenses.
-
Executes dropped EXE
-
Renames itself
-
Enumerates running processes
Discovers information about currently running processes on the system
-
Reads process memory
Read the memory of a process through the /proc virtual filesystem. This can be used to steal credentials.
MITRE ATT&CK Enterprise v16
Defense Evasion
File and Directory Permissions Modification
1Linux and Mac File and Directory Permissions Modification
1Virtualization/Sandbox Evasion
1System Checks
1