General
- Target i686.elf
- Size 5.0MB
- Sample251114-3f413axra1
- SHA256 46ab28771053d0ac2607de413a2cb045aaa8a32b036445b928070ec37eeb130a
- MD5 40249128c6aa8f4f50b74dbe24b9970d
- SHA1 3c549562143c401d31590eba44228f80d331b3b7
- SHA512 75ab1c382584c63d6dabca5a7fc87fd90e592076bed6b67bf4249263dfd217e6a4e04b8cd710fc2aec2feba4d9fc39e49634247c9b421dd880d855ab5f0fb88e
- SSDEEP 98304:+x9d+BPBhB3rFAxEsB9pihCzK9oS0YF0m5Wpv7D5JlKODKw2Hp:BPB7FnaK9P0YF0mIltxM
- MD5 SHA1 SHA512 SSDEEP
Behavioral task
behavioral1
Sample
i686.elf
Resource
ubuntu1804-amd64-20250619-en
Malware Config
Targets
-
- Target i686.elf
- Size 5.0MB
- SHA256 46ab28771053d0ac2607de413a2cb045aaa8a32b036445b928070ec37eeb130a
- MD5 40249128c6aa8f4f50b74dbe24b9970d
- SHA1 3c549562143c401d31590eba44228f80d331b3b7
- SHA512 75ab1c382584c63d6dabca5a7fc87fd90e592076bed6b67bf4249263dfd217e6a4e04b8cd710fc2aec2feba4d9fc39e49634247c9b421dd880d855ab5f0fb88e
- SSDEEP 98304:+x9d+BPBhB3rFAxEsB9pihCzK9oS0YF0m5Wpv7D5JlKODKw2Hp:BPB7FnaK9P0YF0mIltxM
- MD5 SHA1 SHA512 SSDEEP
-
Contacts a large (575455) amount of remote hosts
This may indicate a network scan to discover remotely running services.
-
Creates a large amount of network flows
This may indicate a network scan to discover remotely running services.
-
Creates Raw socket
Creates a socket that captures raw packets at the device level
-
Checks hardware identifiers (DMI)
Checks DMI information which indicate if the system is a virtual machine.
-
Creates/modifies Cron job
Cron allows running tasks on a schedule, and is commonly used for malware persistence.
-
Enumerates running processes
Discovers information about currently running processes on the system
-
Reads hardware information
Accesses system info like serial numbers, manufacturer names etc.
-
Reads network interface configuration
Fetches information about one or more active network interfaces.
MITRE ATT&CK Enterprise v16
Defense Evasion
Impair Defenses
1Disable or Modify System Firewall
1Virtualization/Sandbox Evasion
2System Checks
2