dc892f5013edb0aa1e61e808511387373d8d120348b5be0929621d21e6e9946a

General

Target
wget.sh
Size 2KB
Sample260831-gzqrwsysgy
SHA256 dc892f5013edb0aa1e61e808511387373d8d120348b5be0929621d21e6e9946a
MD5 05834cc3a4651d6bb09031cea6eef2c6
SHA1 a00c7f45cb7b46a3fd8d15558e361a81d6363f13
SHA512 ff389d531479be4d03f8db589f220da914d5364dc83185e4f8e6cbf284b51b761148da873ac08174ece58c58f9157523939942d1ee6ee608cc096b3fa312b6d2
TLSH
T14E5107C6A164DB10C0809D49B3FEA54AA0FBCBC793491F98BFEE0879CF69824702751D
MD5 SHA1 SHA512 TLSH

Score

7^/10

Malware Config

Targets

- Target
  wget.sh
- Size 2KB
- SHA256 dc892f5013edb0aa1e61e808511387373d8d120348b5be0929621d21e6e9946a
- MD5 05834cc3a4651d6bb09031cea6eef2c6
- SHA1 a00c7f45cb7b46a3fd8d15558e361a81d6363f13
- SHA512 ff389d531479be4d03f8db589f220da914d5364dc83185e4f8e6cbf284b51b761148da873ac08174ece58c58f9157523939942d1ee6ee608cc096b3fa312b6d2
- TLSH
  T14E5107C6A164DB10C0809D49B3FEA54AA0FBCBC793491F98BFEE0879CF69824702751D
- MD5 SHA1 SHA512 TLSH
Score

7^/10

defense_evasion discovery persistence
- File and Directory Permissions Modification
  Adversaries may modify file or directory permissions to evade defenses.
  defense_evasion
- Executes dropped EXE
- Modifies Watchdog functionality
  Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.
  defense_evasion
- Enumerates running processes
  Discovers information about currently running processes on the system
- Write file to user bin folder
  persistence
behavioral1 behavioral2 behavioral3 behavioral4

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

File and Directory Permissions Modification

1

T1222

Linux and Mac File and Directory Permissions Modification

Impair Defenses

Credential Access

Discovery

System Network Configuration Discovery

1

T1016

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

File and Directory Permissions Modification

Executes dropped EXE

Modifies Watchdog functionality

Enumerates running processes

Write file to user bin folder

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4