General

  • Target
    tuxClient
  • Size 64.4MB
  • Sample260626-c9963agx2s
  • SHA256 a43f8360712568501228a39f66edcc9c20a02f1ba06dbabf1b11edae02731101
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      tuxClient
    • Size 64.4MB
    • SHA256 a43f8360712568501228a39f66edcc9c20a02f1ba06dbabf1b11edae02731101
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Contacts third-party web service commonly abused for C2

      Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

    • Modifies systemd

      Adds/ modifies systemd service files. Likely to achieve persistence.

MITRE ATT&CK Enterprise v16

Tasks