General
- Target telnet.sh
- Size 1KB
- Sample260806-ywptvshr6s
- SHA256 bac919a3bbc3d4861e773b6a2f622927e444bc5930c5f7d0051bfa4ed7d65633
Score
7/10
Malware Config
Targets
-
- Target telnet.sh
- Size 1KB
- SHA256 bac919a3bbc3d4861e773b6a2f622927e444bc5930c5f7d0051bfa4ed7d65633
Score7/10-
File and Directory Permissions Modification
Adversaries may modify file or directory permissions to evade defenses.
-
Executes dropped EXE
-
Enumerates running processes
Discovers information about currently running processes on the system
-
Modifies init.d
Adds/modifies system service, likely for persistence.
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Boot or Logon Initialization Scripts
1RC Scripts
1Privilege Escalation
Boot or Logon Autostart Execution
1Boot or Logon Initialization Scripts
1RC Scripts
1Defense Evasion
File and Directory Permissions Modification
1Linux and Mac File and Directory Permissions Modification
1Virtualization/Sandbox Evasion
1System Checks
1