General
- Target telnet.sh
- Size 1KB
- Sample260907-werwsazyfw
- SHA256 5180925f28c24bd637c47417c1542736aa3989e7e174d885897cdce880bcda44
Score
7/10
Malware Config
Targets
-
- Target telnet.sh
- Size 1KB
- SHA256 5180925f28c24bd637c47417c1542736aa3989e7e174d885897cdce880bcda44
Score7/10-
File and Directory Permissions Modification
Adversaries may modify file or directory permissions to evade defenses.
-
Executes dropped EXE
-
Enumerates running processes
Discovers information about currently running processes on the system
-
Modifies init.d
Adds/modifies system service, likely for persistence.
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Boot or Logon Initialization Scripts
1RC Scripts
1Privilege Escalation
Boot or Logon Autostart Execution
1Boot or Logon Initialization Scripts
1RC Scripts
1Defense Evasion
File and Directory Permissions Modification
1Linux and Mac File and Directory Permissions Modification
1Virtualization/Sandbox Evasion
1System Checks
1