General
- Target f97dde70be0964a294473498b55d948e46456ff6c543221b5f4dd5d91754f43e
- Size 4.5MB
- Sample261014-arg2fsdv5s
- SHA256 f97dde70be0964a294473498b55d948e46456ff6c543221b5f4dd5d91754f43e
Score
10/10
Malware Config
Targets
-
- Target f97dde70be0964a294473498b55d948e46456ff6c543221b5f4dd5d91754f43e
- Size 4.5MB
- SHA256 f97dde70be0964a294473498b55d948e46456ff6c543221b5f4dd5d91754f43e
Score10/10-
Detects GoDDoSAgent
-
Family: GoDDoSAgent
GoDDoSAgent is a Linux botnet written in GoLang.
-
Creates/modifies environment variables
Creating/modifying environment variables is a common persistence mechanism.
-
Write file to user bin folder
-
Modifies Bash startup script
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Event Triggered Execution
1Unix Shell Configuration Modification
1Hijack Execution Flow
1Path Interception by PATH Environment Variable
1Privilege Escalation
Boot or Logon Autostart Execution
1Event Triggered Execution
1Unix Shell Configuration Modification
1Hijack Execution Flow
1Path Interception by PATH Environment Variable
1