General
- Target ddea09106c582fb477806ac112018e39d150efa7c12189099a4cf4541b3bc000
- Size 1KB
- Sample260728-w4pgysbb43
- SHA256 ddea09106c582fb477806ac112018e39d150efa7c12189099a4cf4541b3bc000
Score
7/10
Malware Config
Targets
-
- Target ddea09106c582fb477806ac112018e39d150efa7c12189099a4cf4541b3bc000
- Size 1KB
- SHA256 ddea09106c582fb477806ac112018e39d150efa7c12189099a4cf4541b3bc000
Score7/10-
File and Directory Permissions Modification
Adversaries may modify file or directory permissions to evade defenses.
-
Executes dropped EXE
-
Enumerates running processes
Discovers information about currently running processes on the system
-
Modifies init.d
Adds/modifies system service, likely for persistence.
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Boot or Logon Initialization Scripts
1RC Scripts
1Privilege Escalation
Boot or Logon Autostart Execution
1Boot or Logon Initialization Scripts
1RC Scripts
1Defense Evasion
File and Directory Permissions Modification
1Linux and Mac File and Directory Permissions Modification
1Virtualization/Sandbox Evasion
1System Checks
1