General
- Target install.sh
- Size 67KB
- Sample260808-nbpcgsej9y
- SHA256 7ed7a1f09123fe8e0d776cfc7f31f7cbfe9afe26aa5ca19f124a6ccb15c97f52
Score
7/10
Malware Config
Targets
-
- Target install.sh
- Size 67KB
- SHA256 7ed7a1f09123fe8e0d776cfc7f31f7cbfe9afe26aa5ca19f124a6ccb15c97f52
Score7/10-
Loads a kernel module
Loads a Linux kernel module, potentially to achieve persistence
-
Modifies the /etc/hosts DNS resolution file
Modifying the /etc/hosts name-resolution file changes IP routing, which can facilitate traffic hijacking or the blocking of (security update) endpoints.
-
Enumerates running processes
Discovers information about currently running processes on the system
-
Removes the immutable protection flag from a file
Uses chattr to remove the immutable flag from a file, allowing previously write-protected files to be modified or deleted.
MITRE ATT&CK Enterprise v16
Defense Evasion
File and Directory Permissions Modification
1Linux and Mac File and Directory Permissions Modification
1Virtualization/Sandbox Evasion
1System Checks
1