General
- Target cbca6049a12c91ad0aad783bed62daf9cf51f0c6f83a55064285d643d5935a5d
- Size 1015B
- Sample260813-zyktcsx1ht
- SHA256 cbca6049a12c91ad0aad783bed62daf9cf51f0c6f83a55064285d643d5935a5d
Score
7/10
Malware Config
Targets
-
- Target cbca6049a12c91ad0aad783bed62daf9cf51f0c6f83a55064285d643d5935a5d
- Size 1015B
- SHA256 cbca6049a12c91ad0aad783bed62daf9cf51f0c6f83a55064285d643d5935a5d
Score7/10-
File and Directory Permissions Modification
Adversaries may modify file or directory permissions to evade defenses.
-
Abuse Elevation Control Mechanism: Sudo and Sudo Caching
Abuse sudo or cached sudo credentials to execute code.
-
Reads AppArmor ptrace settings
Discovery of allowed ptrace capabilities by AppArmor.
-
Enumerates running processes
Discovers information about currently running processes on the system
-
Reads hardware information
Accesses system info like serial numbers, manufacturer names etc.
-
Reads network interface configuration
Fetches information about one or more active network interfaces.
MITRE ATT&CK Enterprise v16
Defense Evasion
Abuse Elevation Control Mechanism
1Sudo and Sudo Caching
1File and Directory Permissions Modification
1Linux and Mac File and Directory Permissions Modification
1