General
- Target 51bbc96498261
- Size 3KB
- Sample260621-bknfbsay8n
- SHA256 6e6b561354e92182012653c231e5e02324031d727102b8fceee9d3f14b39d2d2
- MD5 4e19cb08c9e8fd9341d532369db2ffde
- SHA1 ac41f07fb4eba72dbdbdef6bb304f20fcb053de6
- SHA512 463ff42f8ac5ff7f0771da89cc5593e3da7255ef8f102be5f2f8d0e77ea103892ca77ea5a31254e095de4ff6e6a9fbcc350e3cb2ebf04fb1f161702e44098930
- TLSH T16E8183E5F5F46A717B0C66ABB5BEA0402B870C3F96E57695B00BFC15A02C15C322D23B
- MD5 SHA1 SHA512 TLSH
Static task
static1
Behavioral task
behavioral1
Sample
51bbc96498261
Resource
ubuntu1804-amd64-20260513-en
Behavioral task
behavioral2
Sample
51bbc96498261
Resource
debian9-armhf-20260513-en
Behavioral task
behavioral3
Sample
51bbc96498261
Resource
debian9-mipsbe-20260513-en
Behavioral task
behavioral4
Sample
51bbc96498261
Resource
debian9-mipsel-20260513-en
Malware Config
Targets
-
- Target 51bbc96498261
- Size 3KB
- SHA256 6e6b561354e92182012653c231e5e02324031d727102b8fceee9d3f14b39d2d2
- MD5 4e19cb08c9e8fd9341d532369db2ffde
- SHA1 ac41f07fb4eba72dbdbdef6bb304f20fcb053de6
- SHA512 463ff42f8ac5ff7f0771da89cc5593e3da7255ef8f102be5f2f8d0e77ea103892ca77ea5a31254e095de4ff6e6a9fbcc350e3cb2ebf04fb1f161702e44098930
- TLSH T16E8183E5F5F46A717B0C66ABB5BEA0402B870C3F96E57695B00BFC15A02C15C322D23B
- MD5 SHA1 SHA512 TLSH
-
File and Directory Permissions Modification
Adversaries may modify file or directory permissions to evade defenses.
-
Executes dropped EXE
-
Enumerates running processes
Discovers information about currently running processes on the system
-
Reads Bash history
Adversaries may search the bash command history on compromised systems for insecurely stored credentials.
MITRE ATT&CK Enterprise v16
Defense Evasion
Deobfuscate/Decode Files or Information
1File and Directory Permissions Modification
1Linux and Mac File and Directory Permissions Modification
1Virtualization/Sandbox Evasion
1System Checks
1