Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

[Intel]: https://www.virustotal.com/gui/file/dc8346bf443b7b453f062740d8ae8d8d7ce879672810f4296158f90359dcae3a/detection #420

Open
timb-machine opened this issue May 8, 2022 · 0 comments
Open

[Intel]: https://www.virustotal.com/gui/file/dc8346bf443b7b453f062740d8ae8d8d7ce879672810f4296158f90359dcae3a/detection #420

timb-machine opened this issue May 8, 2022 · 0 comments
Assignees
@timb-machine
Labels
missing:tag:JavaScript missing:tag:T1048 missing:tag:T1071.001 missing:tag:T1491 missing:tag:T1546.004 missing:tag:T1567 missing:tag:T1573

Comments

@timb-machine
Copy link
Owner

timb-machine commented May 8, 2022 •
edited
Loading

Area

Malware binaries

Parent threat

Persistence, Defense Evasion, Command and Control

Finding

https://www.virustotal.com/gui/file/dc8346bf443b7b453f062740d8ae8d8d7ce879672810f4296158f90359dcae3a/detection

Industry reference

#421
attack:T1205.002:Socket Filters
attack:T1036:Masquerading
attack:T1070:Indicator Removal on Host
attack:T1205:Traffic Signaling

Malware reference

BPFDoor
/malware/binaries/BPFDoor/dc8346bf443b7b453f062740d8ae8d8d7ce879672810f4296158f90359dcae3a.elf.sparc
Tricephalic Hellkeeper
Unix.Backdoor.RedMenshen
JustForFun

Actor reference

DecisiveArchitect

Component

Solaris

Scenario

No response
@timb-machine timb-machine self-assigned this May 8, 2022
@timb-machine timb-machine mentioned this issue May 8, 2022
Open
@timb-machine timb-machine added confirmed and removed new labels May 8, 2022
This was referenced May 25, 2022
Open
Open
This was referenced Jun 20, 2022
Open
Open
@timb-machine timb-machine mentioned this issue Jul 4, 2022
Open
@timb-machine timb-machine mentioned this issue Aug 12, 2022
Open
This was referenced Oct 20, 2022
Open
Open
Open
Open
@timb-machine timb-machine moved this from In Progress to Todo in @timb-machine's linux-malware project Apr 23, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@timb-machine timb-machine

Labels
missing:tag:JavaScript missing:tag:T1048 missing:tag:T1071.001 missing:tag:T1491 missing:tag:T1546.004 missing:tag:T1567 missing:tag:T1573
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
1 participant
@timb-machine