General
- Target sys64.i686
- Size 401KB
- Sample260815-pkfmdafg87
- SHA256 8338c7927e798188599cad921943f7b0d5277b058f0521bcca04f5e8b7414b25
Score
7/10
Malware Config
Targets
-
- Target sys64.i686
- Size 401KB
- SHA256 8338c7927e798188599cad921943f7b0d5277b058f0521bcca04f5e8b7414b25
Score7/10-
Modifies PAM framework files
Modifies Linux PAM framework files, possibly to intercept credentials.
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Reads network interface configuration
Fetches information about one or more active network interfaces.
MITRE ATT&CK Enterprise v16
Defense Evasion
Modify Authentication Process
1Pluggable Authentication Modules
1Virtualization/Sandbox Evasion
1System Checks
1