timb-machine / linux-malware

Tracking interesting Linux (and UNIX) malware. Send PRs
The Unlicense
1.1k stars 91 forks source link

[Intel]: https://github.com/R3tr074/brokepkg #777

Open timb-machine opened 6 months ago

timb-machine commented 6 months ago

Area

Malware PoCs

Parent threat

Persistence, Privilege Escalation, Defense Evasion, Command and Control

Finding

https://github.com/R3tr074/brokepkg

Industry reference

uses:ProcessTreeSpoofing uses:AbnormalSignal uses:TamperCredStruct uses:PortHiding attack:T1547.006:Kernel Modules and Extensions attack:T1564.001:Hidden Files and Directories attack:T1573:Encrypted Channel attack:T1205:Traffic Signaling

Malware reference

BrokePkg

Actor reference

No response

Component

Linux

Scenario

No response