General
- Target f.sh
- Size 3KB
- Sample261030-2f212astey
- SHA256 810a0f8502f6af1acab5db1046943a08a8a65378fdd7b569a45c18d62fa2357b
Score
9/10
Malware Config
Targets
-
- Target f.sh
- Size 3KB
- SHA256 810a0f8502f6af1acab5db1046943a08a8a65378fdd7b569a45c18d62fa2357b
Score9/10-
Contacts a large (1406444) amount of remote hosts
This may indicate a network scan to discover remotely running services.
-
Creates a large amount of network flows
This may indicate a network scan to discover remotely running services.
-
File and Directory Permissions Modification
Adversaries may modify file or directory permissions to evade defenses.
-
Creates Raw socket
Creates a socket that captures raw packets at the device level
-
OS Credential Dumping
Adversaries may attempt to dump credentials to use it in password cracking.
-
Deletes log files
Deletes log files on the system.
-
Write file to user bin folder
MITRE ATT&CK Enterprise v16
Defense Evasion
Deobfuscate/Decode Files or Information
1File and Directory Permissions Modification
1Linux and Mac File and Directory Permissions Modification
1Indicator Removal
1Clear Linux or Mac System Logs
1Virtualization/Sandbox Evasion
1System Checks
1