General
- Target 3b3cc9f323462764eea83d26dbdd386b90a4e795d036b5c39b5cc0fe946c06c4.sh
- Size 21KB
- Sample260903-h6seqsxsbz
- SHA256 3b3cc9f323462764eea83d26dbdd386b90a4e795d036b5c39b5cc0fe946c06c4
- MD5 84285f86f93f631d9076bf7a9a47cf6b
- SHA1 c0b6494ba4416624323b402ec16bda4bd7a465cd
- SHA512 3578bde02da3a3b9401447552eba84af0857a854b8ea074a83055440687edd9300c463b8b417d959b8a432c7b8d9edf5b252ff504e8c464f21e25bb363bbaa16
- SSDEEP 192:tvWX4UIgohUTmAchMPqNLRyFqa15mv1gc9uOz7OqUzf9r8aiFmFYEd9nSQtzaMNB:sX4ooKTS88NWc9uXVr8aiIVlfRPX8yFJ
- TLSH T174A2851363DA4AF2245906794D8B1106631952CF06447C287BFEB3186FA5F2E93F2B77
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
3b3cc9f323462764eea83d26dbdd386b90a4e795d036b5c39b5cc0fe946c06c4.sh
Resource
ubuntu1804-amd64-20260513-en
Behavioral task
behavioral2
Sample
3b3cc9f323462764eea83d26dbdd386b90a4e795d036b5c39b5cc0fe946c06c4.sh
Resource
debian9-armhf-20260513-en
Behavioral task
behavioral3
Sample
3b3cc9f323462764eea83d26dbdd386b90a4e795d036b5c39b5cc0fe946c06c4.sh
Resource
debian9-mipsbe-20260513-en
Behavioral task
behavioral4
Sample
3b3cc9f323462764eea83d26dbdd386b90a4e795d036b5c39b5cc0fe946c06c4.sh
Resource
debian9-mipsel-20260513-en
Malware Config
Targets
-
- Target 3b3cc9f323462764eea83d26dbdd386b90a4e795d036b5c39b5cc0fe946c06c4.sh
- Size 21KB
- SHA256 3b3cc9f323462764eea83d26dbdd386b90a4e795d036b5c39b5cc0fe946c06c4
- MD5 84285f86f93f631d9076bf7a9a47cf6b
- SHA1 c0b6494ba4416624323b402ec16bda4bd7a465cd
- SHA512 3578bde02da3a3b9401447552eba84af0857a854b8ea074a83055440687edd9300c463b8b417d959b8a432c7b8d9edf5b252ff504e8c464f21e25bb363bbaa16
- SSDEEP 192:tvWX4UIgohUTmAchMPqNLRyFqa15mv1gc9uOz7OqUzf9r8aiFmFYEd9nSQtzaMNB:sX4ooKTS88NWc9uXVr8aiIVlfRPX8yFJ
- TLSH T174A2851363DA4AF2245906794D8B1106631952CF06447C287BFEB3186FA5F2E93F2B77
- MD5 SHA1 SHA512 SSDEEP TLSH
-
File and Directory Permissions Modification
Adversaries may modify file or directory permissions to evade defenses.
-
Enumerates running processes
Discovers information about currently running processes on the system
-
Modifies systemd
Adds/ modifies systemd service files. Likely to achieve persistence.
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1XDG Autostart Entries
1Create or Modify System Process
1Systemd Service
1Privilege Escalation
Boot or Logon Autostart Execution
1XDG Autostart Entries
1Create or Modify System Process
1Systemd Service
1Defense Evasion
File and Directory Permissions Modification
1Linux and Mac File and Directory Permissions Modification
1Virtualization/Sandbox Evasion
1System Checks
1