General
- Target nklx86.elf
- Size 65KB
- Sample260111-a4w15sbv9a
- SHA256 7be084021f73caa7724d433421524f89dee3c524534b3d3805dc695f7dcdfed7
- MD5 324598913e14957574bfbab4688bbedb
- SHA1 776329341d34d82e9806b7887840a28cbae5d72a
- SHA512 c4c312b1ee3e21bd2ff6d9e4240b0bdc53a4c2b7ad14b6a5e22bb9f5e363eaf25954c04f8be4ed1f3a70ab02be74d194edb03e6930a1e7b5e2d2fa47c2924cce
- SSDEEP 1536:YivbwcpgIs8f+f0Hb9TVIwzCUamHGeLcqbpHanDZRR5:YiDhpgI/WG9TiweUaoTIMED
- MD5 SHA1 SHA512 SSDEEP
Static task
static1
Behavioral task
behavioral1
Sample
nklx86.elf
Resource
ubuntu1804-amd64-20251231-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target nklx86.elf
- Size 65KB
- SHA256 7be084021f73caa7724d433421524f89dee3c524534b3d3805dc695f7dcdfed7
- MD5 324598913e14957574bfbab4688bbedb
- SHA1 776329341d34d82e9806b7887840a28cbae5d72a
- SHA512 c4c312b1ee3e21bd2ff6d9e4240b0bdc53a4c2b7ad14b6a5e22bb9f5e363eaf25954c04f8be4ed1f3a70ab02be74d194edb03e6930a1e7b5e2d2fa47c2924cce
- SSDEEP 1536:YivbwcpgIs8f+f0Hb9TVIwzCUamHGeLcqbpHanDZRR5:YiDhpgI/WG9TiweUaoTIMED
- MD5 SHA1 SHA512 SSDEEP
Score9/10-
Contacts a large (13605) amount of remote hosts
This may indicate a network scan to discover remotely running services.
-
Renames itself
-
Creates a large amount of network flows
This may indicate a network scan to discover remotely running services.