General
- Target nklx86.elf
- Size 66KB
- Sample251224-qyahyset2c
- SHA256 1305fea4d937e2cecb3242e545d92b25b952cc3842a8d2f66b5af589da7f90e8
- MD5 b0a2ec6ed2a2062b992ccf0bb14aa41b
- SHA1 567dae58b5553b33a2c94ac37380989cc24a73eb
- SHA512 baabab475f18c759fda63451cbd44e03e40fc9d1c0532de104bae32d42b9e9c33617fd4661ca4bb1778be5e90ab3a8ecb3df0db860a89951a077135335bfeb5f
- SSDEEP 1536:DR+wEF9UMUyvzPDK3MeLhHX8FWXpyOxRzKQPRR:Dgwi9JUynK31h38g5yyb
- MD5 SHA1 SHA512 SSDEEP
Static task
static1
Behavioral task
behavioral1
Sample
nklx86.elf
Resource
ubuntu1804-amd64-20251223-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target nklx86.elf
- Size 66KB
- SHA256 1305fea4d937e2cecb3242e545d92b25b952cc3842a8d2f66b5af589da7f90e8
- MD5 b0a2ec6ed2a2062b992ccf0bb14aa41b
- SHA1 567dae58b5553b33a2c94ac37380989cc24a73eb
- SHA512 baabab475f18c759fda63451cbd44e03e40fc9d1c0532de104bae32d42b9e9c33617fd4661ca4bb1778be5e90ab3a8ecb3df0db860a89951a077135335bfeb5f
- SSDEEP 1536:DR+wEF9UMUyvzPDK3MeLhHX8FWXpyOxRzKQPRR:Dgwi9JUynK31h38g5yyb
- MD5 SHA1 SHA512 SSDEEP
Score9/10-
Contacts a large (15022) amount of remote hosts
This may indicate a network scan to discover remotely running services.
-
Renames itself
-
Creates a large amount of network flows
This may indicate a network scan to discover remotely running services.