General
- Target SSH_Terminal.rar
- Size 334KB
- Sample260912-plxbhsbg53
- SHA256 c044d196147f01f97c485b0a25d32617a98436978b1e48bb139a019f0eae6116
Score
7/10
Malware Config
Targets
-
- Target SSH Terminal/listmaker
- Size 8KB
- SHA256 0680afc5eb4368382f1cc06e023ba089fb6c295ee3bdebe995128787a5e30e70
Score3/10 -
- Target SSH Terminal/loader.py
- Size 3KB
- SHA256 65e4f1ccf9ee04b8e7bb2f93fc43856a2de6aead8bf9267982c48942b6a16821
Score3/10 -
- Target SSH Terminal/terminal
- Size 22KB
- SHA256 321dbb0440a727e71990508549baddad530d2a5604c55457608b81d9cd9b9442
Score1/10 -
- Target SSH Terminal/update
- Size 836KB
- SHA256 f963d10abd31e8da66fdf989640c788c69030de01b891df583fe3ce6f3e12ef9
Score7/10-
Executes dropped EXE
-
Creates/modifies Cron job
Cron allows running tasks on a schedule, and is commonly used for malware persistence.
-
Write file to user bin folder
-
Writes file to system bin folder