Overview

overview

7

Static

static

1

install-agent.sh

ubuntu-20.04-amd64

7

Sharing

Copy URL Twitter E-mail

General

  • Target
    install-agent.sh
  • Size 2KB
  • Sample260803-zd2alsxdqa
  • SHA256 1d39cb967fb258e08bfa51c622f44fe96de8ebc72ad6bea0c6f5ad58f8c17c1e
  • MD5 SHA1 SHA512 TLSH
Score
7/10
defense_evasiondiscoverylinuxpersistenceprivilege_escalationstealer

Malware Config

Targets

    • Target
      install-agent.sh
    • Size 2KB
    • SHA256 1d39cb967fb258e08bfa51c622f44fe96de8ebc72ad6bea0c6f5ad58f8c17c1e
    • MD5 SHA1 SHA512 TLSH
    Score
    7/10
    defense_evasiondiscoverypersistenceprivilege_escalationstealer

    • File and Directory Permissions Modification

      Adversaries may modify file or directory permissions to evade defenses.

      defense_evasion

    • Executes dropped EXE

    • Reads EFI boot settings

      Reads EFI boot settings from the efivars filesystem, may contain security secrets or sensitive data.

      stealer

    • Modifies systemd

      Adds/ modifies systemd service files. Likely to achieve persistence.

      persistenceprivilege_escalation
    behavioral1

MITRE ATT&CK Enterprise v16

Tasks