General
- Target file01.ps1
- Size 230B
- Sample260712-ax2ytabw4l
- SHA256 28299ba665f5e836a13a5784a3f3099c5f3c8b38a4d843ac4d6972f9f8e9e9df
Malware Config
Targets
-
- Target file01.ps1
- Size 230B
- SHA256 28299ba665f5e836a13a5784a3f3099c5f3c8b38a4d843ac4d6972f9f8e9e9df
Score7/10-
File Permission
Adversaries may modify file permissions/attributes to evade access control lists (ACLs) and access protected files.
-
System Checks
Adversaries may employ various system checks to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox.
-
Gatekeeper Bypass
Adversaries may modify file attributes and subvert Gatekeeper functionality to evade user prompts and execute untrusted programs. Gatekeeper is a set of technologies that act as layer of Apples security model to ensure only trusted applications are executed on a host.
MITRE ATT&CK Enterprise v16
Defense Evasion
File and Directory Permissions Modification
1Linux and Mac File and Directory Permissions Modification
1Hide Artifacts
1Resource Forking
1Subvert Trust Controls
1Gatekeeper Bypass
1Virtualization/Sandbox Evasion
1System Checks
1