General
- Target 7824e906e6bc2fe40b62b7fed3990103dd894ac0e27367ac4509eb9e2209dbcf
- Size 1KB
- Sample260815-rfce9sytdv
- SHA256 7824e906e6bc2fe40b62b7fed3990103dd894ac0e27367ac4509eb9e2209dbcf
Score
7/10
Malware Config
Targets
-
- Target 7824e906e6bc2fe40b62b7fed3990103dd894ac0e27367ac4509eb9e2209dbcf
- Size 1KB
- SHA256 7824e906e6bc2fe40b62b7fed3990103dd894ac0e27367ac4509eb9e2209dbcf
Score7/10-
File and Directory Permissions Modification
Adversaries may modify file or directory permissions to evade defenses.
-
Executes dropped EXE
-
Enumerates running processes
Discovers information about currently running processes on the system
-
Modifies init.d
Adds/modifies system service, likely for persistence.
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Boot or Logon Initialization Scripts
1RC Scripts
1Privilege Escalation
Boot or Logon Autostart Execution
1Boot or Logon Initialization Scripts
1RC Scripts
1Defense Evasion
File and Directory Permissions Modification
1Linux and Mac File and Directory Permissions Modification
1Virtualization/Sandbox Evasion
1System Checks
1