General

  • Target
    t.sh
  • Size 153B
  • Sample260930-g2knnatdmb
  • SHA256 378c84b547b9c0158ce497f589aae592d465eb06ba7ab572e5c98a001a0a43e6
  • MD5 SHA1 SHA512 TLSH

Malware Config

Targets

    • Target
      t.sh
    • Size 153B
    • SHA256 378c84b547b9c0158ce497f589aae592d465eb06ba7ab572e5c98a001a0a43e6
    • MD5 SHA1 SHA512 TLSH
    • File and Directory Permissions Modification

      Adversaries may modify file or directory permissions to evade defenses.

    • Deletes itself

    • Executes dropped EXE

    • Removes the immutable protection flag from a file

      Uses chattr to remove the immutable flag from a file, allowing previously write-protected files to be modified or deleted.

MITRE ATT&CK Enterprise v16

Tasks