General
- Target _e57b1845b339fd601f9c2b7777549ec883d5678944592437f48a2a87bed0a141.sh
- Size 44KB
- Sample260529-h77aaaex4m
- SHA256 e57b1845b339fd601f9c2b7777549ec883d5678944592437f48a2a87bed0a141
Score
8/10
Malware Config
Targets
-
- Target _e57b1845b339fd601f9c2b7777549ec883d5678944592437f48a2a87bed0a141.sh
- Size 44KB
- SHA256 e57b1845b339fd601f9c2b7777549ec883d5678944592437f48a2a87bed0a141
Score8/10-
Modifies password files for system users/ groups
Modifies files storing password hashes of existing users/ groups, likely to grant additional privileges.
-
File and Directory Permissions Modification
Adversaries may modify file or directory permissions to evade defenses.
-
OS Credential Dumping
Adversaries may attempt to dump credentials to use it in password cracking.
-
Adds a user to the system
MITRE ATT&CK Enterprise v16
Defense Evasion
Deobfuscate/Decode Files or Information
1File and Directory Permissions Modification
1Linux and Mac File and Directory Permissions Modification
1Modify Authentication Process
1Pluggable Authentication Modules
1Virtualization/Sandbox Evasion
1System Checks
1