General
- Target linux.bash
- Size 3KB
- Sample260729-vtd3ssck2s
- SHA256 5e15f692e85c701af5940001deec990cf5a7cdfde19f0d90692b8e6bf732a030
- MD5 1d8778c51e6a5e3bac9280ad0f9ea872
- SHA1 4a39bf7b630e396bc54ef3b3b3cd0e2830efe665
- SHA512 1def29edd0e1ae7876336a53df52247de773db991ea84eab1e414543a45bef5f71f4274eabc7e335f52d5d8f67fd9b6336a370aecad0fe31617905b4536f9b52
- TLSH T1F461775357DF497320599B64C92B65412920A2C74A18AC3077E9D2CCFB22B2C46BBDBF
- MD5 SHA1 SHA512 TLSH
Static task
static1
Behavioral task
behavioral1
Sample
linux.bash
Resource
ubuntu1804-amd64-20260513-en
Behavioral task
behavioral2
Sample
linux.bash
Resource
debian9-armhf-20260513-en
Behavioral task
behavioral3
Sample
linux.bash
Resource
debian9-mipsbe-20260513-en
Behavioral task
behavioral4
Sample
linux.bash
Resource
debian9-mipsel-20260513-en
Malware Config
Targets
-
- Target linux.bash
- Size 3KB
- SHA256 5e15f692e85c701af5940001deec990cf5a7cdfde19f0d90692b8e6bf732a030
- MD5 1d8778c51e6a5e3bac9280ad0f9ea872
- SHA1 4a39bf7b630e396bc54ef3b3b3cd0e2830efe665
- SHA512 1def29edd0e1ae7876336a53df52247de773db991ea84eab1e414543a45bef5f71f4274eabc7e335f52d5d8f67fd9b6336a370aecad0fe31617905b4536f9b52
- TLSH T1F461775357DF497320599B64C92B65412920A2C74A18AC3077E9D2CCFB22B2C46BBDBF
- MD5 SHA1 SHA512 TLSH
-
File and Directory Permissions Modification
Adversaries may modify file or directory permissions to evade defenses.
-
Modifies systemd
Adds/ modifies systemd service files. Likely to achieve persistence.
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1XDG Autostart Entries
1Create or Modify System Process
1Systemd Service
1Privilege Escalation
Boot or Logon Autostart Execution
1XDG Autostart Entries
1Create or Modify System Process
1Systemd Service
1Defense Evasion
File and Directory Permissions Modification
1Linux and Mac File and Directory Permissions Modification
1Virtualization/Sandbox Evasion
1System Checks
1