General
- Target lun
- Size 352KB
- Sample260719-evvtyabv7q
- SHA256 0ee4f5ac150d4fca05884c6b8bb9ce00e8c70fe93d545262d1023ad491e1e089
Score
7/10
Malware Config
Targets
-
- Target lun
- Size 352KB
- SHA256 0ee4f5ac150d4fca05884c6b8bb9ce00e8c70fe93d545262d1023ad491e1e089
Score7/10-
Deletes journal logs
Deletes systemd journal logs. Likely to evade detection.
-
Abuse Elevation Control Mechanism: Sudo and Sudo Caching
Abuse sudo or cached sudo credentials to execute code.
-
Reads AppArmor ptrace settings
Discovery of allowed ptrace capabilities by AppArmor.
-
Deletes log files
Deletes log files on the system.
-
Enumerates running processes
Discovers information about currently running processes on the system
-
Reads hardware information
Accesses system info like serial numbers, manufacturer names etc.
-
Reads network interface configuration
Fetches information about one or more active network interfaces.
MITRE ATT&CK Enterprise v16
Defense Evasion
Abuse Elevation Control Mechanism
1Sudo and Sudo Caching
1Deobfuscate/Decode Files or Information
1Indicator Removal
2Clear Linux or Mac System Logs
2