General
- Target cats.sh
- Size 537B
- Sample261109-hapc7svv9n
- SHA256 1985cefcce24e91e2acee27754b68cee0bf285115a917d403eafddc3e2c54c61
Score
9/10
Malware Config
Targets
-
- Target cats.sh
- Size 537B
- SHA256 1985cefcce24e91e2acee27754b68cee0bf285115a917d403eafddc3e2c54c61
Score9/10Contacts a large (167433) amount of remote hosts
This may indicate a network scan to discover remotely running services.
Creates a large amount of network flows
This may indicate a network scan to discover remotely running services.
File and Directory Permissions Modification
Adversaries may modify file or directory permissions to evade defenses.
Executes dropped EXE
Modifies Watchdog functionality
Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.
Enumerates active TCP sockets
Gets active TCP sockets from /proc virtual filesystem.
MITRE ATT&CK Enterprise v16
Defense Evasion
File and Directory Permissions Modification
1Linux and Mac File and Directory Permissions Modification
1Impair Defenses
1