General
- Target hexlicsrv94_x64linux.run
- Size 7.3MB
- Sample260908-vqaafavfrd
- SHA256 f63d02938229723c8a0b92de1b21e423a2ead1dc3f6abd354db2d6ffae7ed906
Score
8/10
Malware Config
Targets
-
- Target hexlicsrv94_x64linux.run
- Size 7.3MB
- SHA256 f63d02938229723c8a0b92de1b21e423a2ead1dc3f6abd354db2d6ffae7ed906
Score8/10-
Modifies password files for system users/ groups
Modifies files storing password hashes of existing users/ groups, likely to grant additional privileges.
-
OS Credential Dumping
Adversaries may attempt to dump credentials to use it in password cracking.
-
Adds a user to the system
MITRE ATT&CK Enterprise v16
Defense Evasion
Modify Authentication Process
1Pluggable Authentication Modules
1Virtualization/Sandbox Evasion
1System Checks
1Credential Access
Modify Authentication Process
1Pluggable Authentication Modules
1OS Credential Dumping
1/etc/passwd and /etc/shadow
1