General

  • Target
    clean
  • Size 1KB
  • Sample260826-ajx3ps1aph
  • SHA256 3f3a11bafabb1a35db913cfe51995f2e357d049e268860175876ae5a93d23892
  • MD5 SHA1 SHA512 TLSH

Malware Config

Targets

    • Target
      clean
    • Size 1KB
    • SHA256 3f3a11bafabb1a35db913cfe51995f2e357d049e268860175876ae5a93d23892
    • MD5 SHA1 SHA512 TLSH
    • Creates/modifies Cron job

      Cron allows running tasks on a schedule, and is commonly used for malware persistence.

    • Removes the immutable protection flag from a file

      Uses chattr to remove the immutable flag from a file, allowing previously write-protected files to be modified or deleted.

MITRE ATT&CK Enterprise v16

Tasks