General
- Target linux_amd64.elf
- Size 1.9MB
- Sample260320-jb4d7acs2j
- SHA256 dcf5df996a112e892bae324b5e3c0664ad4d4f9f473494bcaad1cac3adedb512
Score
6/10
Malware Config
Targets
-
- Target linux_amd64.elf
- Size 1.9MB
- SHA256 dcf5df996a112e892bae324b5e3c0664ad4d4f9f473494bcaad1cac3adedb512
Score6/10-
Creates/modifies environment variables
Creating/modifying environment variables is a common persistence mechanism.
-
Modifies init.d
Adds/modifies system service, likely for persistence.
-
Modifies rc script
Adding/modifying system rc scripts is a common persistence mechanism.
-
Modifies Bash startup script
-
UPX packed file
Detects executables packed with UPX/modified UPX open source packer.
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
3Boot or Logon Initialization Scripts
2RC Scripts
2Event Triggered Execution
1Unix Shell Configuration Modification
1Hijack Execution Flow
1Path Interception by PATH Environment Variable
1Privilege Escalation
Boot or Logon Autostart Execution
3Boot or Logon Initialization Scripts
2RC Scripts
2Event Triggered Execution
1Unix Shell Configuration Modification
1Hijack Execution Flow
1Path Interception by PATH Environment Variable
1