General
- Target install.sh
- Size 26KB
- Sample260815-wt5fes11gy
- SHA256 d3eb882d32f38c23b5a08fd4b50e71713f6c028728eb859ac1eca421f1b10069
- MD5 a4e091171c8050d7cebfa9dcd3b1198b
- SHA1 930e1a0cdfeca491c39619a0b24e235e69267f99
- SHA512 5fc6fa4dbd4cf1a8bcec135b6da863b0b756750bfbd797c900b062aed9b85caed5c5df3c254c997fea5f9809ad12ec2c7bc172f1fde6e558c0ae68d69542c27c
- SSDEEP 384:8Pk4vuLcgw3N8lVqv8yEUCAC/vsMxD3kIuuNRasi5kFq2dzu3AQvc6sbB5uIFyJ:8xV3NMqv8PjFU47asLxY
- TLSH T12EC2C653AE9909F61458C6742F8B510AE31562C702516C28BBFD73187F84B1E93BEE3B
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
install.sh
Resource
ubuntu1804-amd64-20260513-en
Behavioral task
behavioral2
Sample
install.sh
Resource
debian9-armhf-20260513-en
Behavioral task
behavioral3
Sample
install.sh
Resource
debian9-mipsbe-20260513-en
Behavioral task
behavioral4
Sample
install.sh
Resource
debian9-mipsel-20260513-en
Malware Config
Targets
-
- Target install.sh
- Size 26KB
- SHA256 d3eb882d32f38c23b5a08fd4b50e71713f6c028728eb859ac1eca421f1b10069
- MD5 a4e091171c8050d7cebfa9dcd3b1198b
- SHA1 930e1a0cdfeca491c39619a0b24e235e69267f99
- SHA512 5fc6fa4dbd4cf1a8bcec135b6da863b0b756750bfbd797c900b062aed9b85caed5c5df3c254c997fea5f9809ad12ec2c7bc172f1fde6e558c0ae68d69542c27c
- SSDEEP 384:8Pk4vuLcgw3N8lVqv8yEUCAC/vsMxD3kIuuNRasi5kFq2dzu3AQvc6sbB5uIFyJ:8xV3NMqv8PjFU47asLxY
- TLSH T12EC2C653AE9909F61458C6742F8B510AE31562C702516C28BBFD73187F84B1E93BEE3B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
File and Directory Permissions Modification
Adversaries may modify file or directory permissions to evade defenses.
-
Enumerates running processes
Discovers information about currently running processes on the system
-
Modifies systemd
Adds/ modifies systemd service files. Likely to achieve persistence.
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1XDG Autostart Entries
1Create or Modify System Process
1Systemd Service
1Privilege Escalation
Boot or Logon Autostart Execution
1XDG Autostart Entries
1Create or Modify System Process
1Systemd Service
1Defense Evasion
File and Directory Permissions Modification
1Linux and Mac File and Directory Permissions Modification
1Virtualization/Sandbox Evasion
1System Checks
1