General
- Target 6315a95b1b445128e388e94bbdbd416fe36148811bb0f56b2c1ccb6602dfc5ef
- Size 5KB
- Sample260823-r2mhcssway
- SHA256 6315a95b1b445128e388e94bbdbd416fe36148811bb0f56b2c1ccb6602dfc5ef
Score
7/10
Malware Config
Targets
-
- Target 6315a95b1b445128e388e94bbdbd416fe36148811bb0f56b2c1ccb6602dfc5ef
- Size 5KB
- SHA256 6315a95b1b445128e388e94bbdbd416fe36148811bb0f56b2c1ccb6602dfc5ef
Score7/10File and Directory Permissions Modification
Adversaries may modify file or directory permissions to evade defenses.
Executes dropped EXE
Modifies Watchdog functionality
Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.
Reads system routing table
Gets active network interfaces from /proc virtual filesystem.
MITRE ATT&CK Enterprise v16
Defense Evasion
File and Directory Permissions Modification
1Linux and Mac File and Directory Permissions Modification
1Impair Defenses
1Virtualization/Sandbox Evasion
1System Checks
1