General
- Target clean
- Size 1KB
- Sample260826-ajx3ps1aph
- SHA256 3f3a11bafabb1a35db913cfe51995f2e357d049e268860175876ae5a93d23892
- MD5 2ca1a863f6a115127d623d3d181ab9b4
- SHA1 58c15d76520685b6c151cd48b09375bb94b825be
- SHA512 a0ae4c381d90f162558cbfd1b79a85716937d6899399a5a13b2846611e545388c69e02ad819701f60cafb1ae2cb8d026a5fb2ea790a6aa050478036d696c31ee
- TLSH T1AB21BE8EABA1ED3120D9D528B7F2493E5E62F29A2C107411358631FCE4DC62032EDC7A
- MD5 SHA1 SHA512 TLSH
Static task
static1
Behavioral task
behavioral1
Sample
clean
Resource
ubuntu1804-amd64-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
clean
Resource
debian9-armhf-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral3
Sample
clean
Resource
debian9-mipsbe-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral4
Sample
clean
Resource
debian9-mipsel-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target clean
- Size 1KB
- SHA256 3f3a11bafabb1a35db913cfe51995f2e357d049e268860175876ae5a93d23892
- MD5 2ca1a863f6a115127d623d3d181ab9b4
- SHA1 58c15d76520685b6c151cd48b09375bb94b825be
- SHA512 a0ae4c381d90f162558cbfd1b79a85716937d6899399a5a13b2846611e545388c69e02ad819701f60cafb1ae2cb8d026a5fb2ea790a6aa050478036d696c31ee
- TLSH T1AB21BE8EABA1ED3120D9D528B7F2493E5E62F29A2C107411358631FCE4DC62032EDC7A
- MD5 SHA1 SHA512 TLSH
-
Creates/modifies Cron job
Cron allows running tasks on a schedule, and is commonly used for malware persistence.
-
Removes the immutable protection flag from a file
Uses chattr to remove the immutable flag from a file, allowing previously write-protected files to be modified or deleted.
MITRE ATT&CK Enterprise v16
Tasks
static1
Score
1/10
behavioral1
discoveryexecutionpersistenceprivilege_escalation
Score
6/10
behavioral2
discoveryexecutionpersistenceprivilege_escalation
Score
6/10
behavioral3
discoveryexecutionpersistenceprivilege_escalation
Score
6/10
behavioral4
discoveryexecutionpersistenceprivilege_escalation
Score
6/10