General
- Target e78bc0ed5328a2f3eb204e8717a2ea8ba839bee32b4780f9dd248fbac11a0773
- Size 4KB
- Sample260809-c7b69agm5z
- SHA256 e78bc0ed5328a2f3eb204e8717a2ea8ba839bee32b4780f9dd248fbac11a0773
- MD5 aef54f2b399603800d665a10126a64d5
- SHA1 4f1ce843c3e725b250b3cfd0bf5ab6971729cb53
- SHA512 0a4d707ceb8d865cef582bb7ba9c206ed3e6bfda4f2c6cd9492d5f951f9ca0e97616ccf541fd8bac34d6ec2d3ac24f82eb61e1ec5aa4b4b89f3067e50f272f98
- SSDEEP 96:oBuOBp+G1SU5Zb5PQPOjRNLXwVRa1PeycgeXyB3rYlk7GiQQEOJ5OtYuUvnUB:oBuOBp+GYUBIyVXwVRpelotY1u
- TLSH T1749122C07A6994B3F5FED5459184A5B5F3846C8F8743BE5C302F86AC5B883C8E09D1E0
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
e78bc0ed5328a2f3eb204e8717a2ea8ba839bee32b4780f9dd248fbac11a0773
Resource
ubuntu1804-amd64-20260513-en
Behavioral task
behavioral2
Sample
e78bc0ed5328a2f3eb204e8717a2ea8ba839bee32b4780f9dd248fbac11a0773
Resource
debian9-armhf-20260513-en
Behavioral task
behavioral3
Sample
e78bc0ed5328a2f3eb204e8717a2ea8ba839bee32b4780f9dd248fbac11a0773
Resource
debian9-mipsbe-20260513-en
Behavioral task
behavioral4
Sample
e78bc0ed5328a2f3eb204e8717a2ea8ba839bee32b4780f9dd248fbac11a0773
Resource
debian9-mipsel-20260513-en
Malware Config
Targets
-
- Target e78bc0ed5328a2f3eb204e8717a2ea8ba839bee32b4780f9dd248fbac11a0773
- Size 4KB
- SHA256 e78bc0ed5328a2f3eb204e8717a2ea8ba839bee32b4780f9dd248fbac11a0773
- MD5 aef54f2b399603800d665a10126a64d5
- SHA1 4f1ce843c3e725b250b3cfd0bf5ab6971729cb53
- SHA512 0a4d707ceb8d865cef582bb7ba9c206ed3e6bfda4f2c6cd9492d5f951f9ca0e97616ccf541fd8bac34d6ec2d3ac24f82eb61e1ec5aa4b4b89f3067e50f272f98
- SSDEEP 96:oBuOBp+G1SU5Zb5PQPOjRNLXwVRa1PeycgeXyB3rYlk7GiQQEOJ5OtYuUvnUB:oBuOBp+GYUBIyVXwVRpelotY1u
- TLSH T1749122C07A6994B3F5FED5459184A5B5F3846C8F8743BE5C302F86AC5B883C8E09D1E0
- MD5 SHA1 SHA512 SSDEEP TLSH
-
File and Directory Permissions Modification
Adversaries may modify file or directory permissions to evade defenses.
-
Creates/modifies environment variables
Creating/modifying environment variables is a common persistence mechanism.
-
Enumerates running processes
Discovers information about currently running processes on the system
-
Modifies Bash startup script
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Event Triggered Execution
1Unix Shell Configuration Modification
1Hijack Execution Flow
1Path Interception by PATH Environment Variable
1Privilege Escalation
Boot or Logon Autostart Execution
1Event Triggered Execution
1Unix Shell Configuration Modification
1Hijack Execution Flow
1Path Interception by PATH Environment Variable
1