Overview

overview

7

Static

static

1

controlar_...roy.py

ubuntu-22.04-amd64

7

controlar_...roy.py

debian-9-armhf

3

controlar_...roy.py

debian-9-mips

3

controlar_...roy.py

debian-9-mipsel

3

Sharing

Copy URL Twitter E-mail

General

  • Target
    controlar_flujo_booth_system_destroy.py
  • Size 1KB
  • Sample260905-rpprystscs
  • SHA256 9ea76fd85237c655f5965c763b23e679c62eb86bff3297dec64aac3334f79fc0
  • MD5 SHA1 SHA512 TLSH
Score
7/10
credential_accessdefense_evasiondiscoveryexecutionlinuxprivilege_escalation

Malware Config

Targets

    • Target
      controlar_flujo_booth_system_destroy.py
    • Size 1KB
    • SHA256 9ea76fd85237c655f5965c763b23e679c62eb86bff3297dec64aac3334f79fc0
    • MD5 SHA1 SHA512 TLSH
    Score
    7/10
    credential_accessdefense_evasiondiscoveryexecutionprivilege_escalation

    • OS Credential Dumping

      Adversaries may attempt to dump credentials to use it in password cracking.

      credential_access

    • Abuse Elevation Control Mechanism: Sudo and Sudo Caching

      Abuse sudo or cached sudo credentials to execute code.

      privilege_escalationdefense_evasion

    • Enumerates running processes

      Discovers information about currently running processes on the system

    behavioral1behavioral2behavioral3behavioral4

MITRE ATT&CK Enterprise v16

Tasks