General
- Target ok.sh
- Size 1KB
- Sample260622-txecases7k
- SHA256 0bc4cf3fed9fd5c474fd5a3cfd4b8b47b3f559942eeecad0066bb507a1e0e25f
- MD5 2fe3d750709af03393841e535a0c38ef
- SHA1 8e75b2d56b133b2ed15ccd29dd628c113300900e
- SHA512 81cf13f76737fdbfe2262eb582a632d3f8d681678a4b0cdadaf8d7e0e07e88791459d424cd60b1b4b6dc95d8578ad1b633991c6bfc2399309630cdd0751d5272
- TLSH T1DC310C9F00106F792257CADE77B33948780CC2FF2C8BD7A499480EA986495C8B5A5BE5
- MD5 SHA1 SHA512 TLSH
Static task
static1
Behavioral task
behavioral1
Sample
ok.sh
Resource
ubuntu1804-amd64-20260513-en
Behavioral task
behavioral2
Sample
ok.sh
Resource
debian9-armhf-20260513-en
Behavioral task
behavioral3
Sample
ok.sh
Resource
debian9-mipsbe-20260513-en
Behavioral task
behavioral4
Sample
ok.sh
Resource
debian9-mipsel-20260513-en
Malware Config
Targets
-
- Target ok.sh
- Size 1KB
- SHA256 0bc4cf3fed9fd5c474fd5a3cfd4b8b47b3f559942eeecad0066bb507a1e0e25f
- MD5 2fe3d750709af03393841e535a0c38ef
- SHA1 8e75b2d56b133b2ed15ccd29dd628c113300900e
- SHA512 81cf13f76737fdbfe2262eb582a632d3f8d681678a4b0cdadaf8d7e0e07e88791459d424cd60b1b4b6dc95d8578ad1b633991c6bfc2399309630cdd0751d5272
- TLSH T1DC310C9F00106F792257CADE77B33948780CC2FF2C8BD7A499480EA986495C8B5A5BE5
- MD5 SHA1 SHA512 TLSH
Score10/10File and Directory Permissions Modification
Adversaries may modify file or directory permissions to evade defenses.
Executes dropped EXE
Modifies Watchdog functionality
Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.
Enumerates running processes
Discovers information about currently running processes on the system
MITRE ATT&CK Enterprise v16
Defense Evasion
File and Directory Permissions Modification
1Linux and Mac File and Directory Permissions Modification
1Impair Defenses
1Virtualization/Sandbox Evasion
1System Checks
1