Resubmissions

08/07/2026, 17:21

260708-vxavjsdt7r7

08/07/2026, 17:20

260708-vwmsqadt6j7

General

  • Target
    rip.sh
  • Size 298B
  • Sample260708-vxavjsdt7r
  • SHA256 febe419894f924442d51111ea968c3feb3887d90f3556d51a5eea10bdc8125de
  • MD5 SHA1 SHA512 TLSH

Malware Config

Targets

    • Target
      rip.sh
    • Size 298B
    • SHA256 febe419894f924442d51111ea968c3feb3887d90f3556d51a5eea10bdc8125de
    • MD5 SHA1 SHA512 TLSH
    • OS Credential Dumping

      Adversaries may attempt to dump credentials to use it in password cracking.

    • Abuse Elevation Control Mechanism: Sudo and Sudo Caching

      Abuse sudo or cached sudo credentials to execute code.

    • Checks mountinfo of local process

      Checks mountinfo of running processes which indicate if it is running in chroot jail.

MITRE ATT&CK Enterprise v16

Tasks