Overview

overview

10

Static

static

10

tcp.elf

ubuntu-18.04-amd64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    tcp.elf
  • Size 30KB
  • Sample240912-tvsf5stcpm
  • SHA256 44a9389128df8afb8c9d60cb7dcb35ce43f2004da0f30530719eeb9070f00ac7
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
ladvixbotnetdiscoveryexecutioninfectorlinuxpersistenceprivilege_escalationtrojan

Malware Config

Targets

    • Target
      tcp.elf
    • Size 30KB
    • SHA256 44a9389128df8afb8c9d60cb7dcb35ce43f2004da0f30530719eeb9070f00ac7
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    ladvixbotnetdiscoveryexecutioninfectorpersistenceprivilege_escalationtrojan

    • Contains strings common to LOLSquad DDoS tools

      Resembles a range of public tools written in C intended for DDoS attacks.

      botnet

    • Ladvix

      Ladvix is a linux trojan and file infector first seen in 2022.

      trojaninfectorladvix

    • Ladvix family

      ladvix

    • Executes dropped EXE

    • Creates/modifies Cron job

      Cron allows running tasks on a schedule, and is commonly used for malware persistence.

      executionpersistenceprivilege_escalation

    • Writes file to system bin folder

    behavioral1

MITRE ATT&CK Enterprise v16

Tasks