General
- Target 2d2065bfedb08553f591b68a98f7cc7c14042438bf0351266be601486309ca80
- Size 1KB
- Sample261014-dbjf5aex2v
- SHA256 2d2065bfedb08553f591b68a98f7cc7c14042438bf0351266be601486309ca80
Score
10/10
Malware Config
Targets
-
- Target 2d2065bfedb08553f591b68a98f7cc7c14042438bf0351266be601486309ca80
- Size 1KB
- SHA256 2d2065bfedb08553f591b68a98f7cc7c14042438bf0351266be601486309ca80
Score10/10-
Detects FlyLegitBot
-
Family: FlyLegitBot
FlyLegitBot is a Mirai-based botnet.
-
File and Directory Permissions Modification
Adversaries may modify file or directory permissions to evade defenses.
-
Deletes itself
-
Executes dropped EXE
-
Enumerates running processes
Discovers information about currently running processes on the system
MITRE ATT&CK Enterprise v16
Defense Evasion
File and Directory Permissions Modification
1Linux and Mac File and Directory Permissions Modification
1Virtualization/Sandbox Evasion
1System Checks
1