General

  • Target
    ecryptfsd
  • Size 6.6MB
  • Sample260906-ws6l4ace35
  • SHA256 34348a45ad73514d415e99d15e386465f585fdb4fa7b715974969420a35a079e
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      ecryptfsd
    • Size 6.6MB
    • SHA256 34348a45ad73514d415e99d15e386465f585fdb4fa7b715974969420a35a079e
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Creates/modifies Cron job

      Cron allows running tasks on a schedule, and is commonly used for malware persistence.

    • Enumerates running processes

      Discovers information about currently running processes on the system

MITRE ATT&CK Enterprise v16

Tasks