General
- Target nklx86.elf
- Size 77KB
- Sample260127-phbkmsdy7g
- SHA256 ea2d35b7c56818b77a6758f692e6237ae1eeee5e71ffe781728bd6554074d15d
- MD5 9d2a83f7e771e2ff8de3279c3a79bdf4
- SHA1 2e0c08389805148611fbb587b31dd1e15bca2a33
- SHA512 1ecfa69e39c74b149babaafb2502ac4d4a0fffd8c1cda8dec91d186477af3927d9f3e235a3b2d76928199d8963eae9d6ad9ed89447c69df71b2faa8ab993a69b
- SSDEEP 1536:/o4AoBD+7oP9T8S2xtg6HMs+24jEeE+MykYEBTJwEtJ7FVTF6x33AT:/HFxEi9TLscs6jzE+FkY0TG09bZcY
- MD5 SHA1 SHA512 SSDEEP
Static task
static1
Behavioral task
behavioral1
Sample
nklx86.elf
Resource
ubuntu1804-amd64-20260126-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target nklx86.elf
- Size 77KB
- SHA256 ea2d35b7c56818b77a6758f692e6237ae1eeee5e71ffe781728bd6554074d15d
- MD5 9d2a83f7e771e2ff8de3279c3a79bdf4
- SHA1 2e0c08389805148611fbb587b31dd1e15bca2a33
- SHA512 1ecfa69e39c74b149babaafb2502ac4d4a0fffd8c1cda8dec91d186477af3927d9f3e235a3b2d76928199d8963eae9d6ad9ed89447c69df71b2faa8ab993a69b
- SSDEEP 1536:/o4AoBD+7oP9T8S2xtg6HMs+24jEeE+MykYEBTJwEtJ7FVTF6x33AT:/HFxEi9TLscs6jzE+FkY0TG09bZcY
- MD5 SHA1 SHA512 SSDEEP
Score9/10-
Contacts a large (117087) amount of remote hosts
This may indicate a network scan to discover remotely running services.
-
Creates a large amount of network flows
This may indicate a network scan to discover remotely running services.
-
Deletes itself
-
Executes dropped EXE
-
Enumerates running processes
Discovers information about currently running processes on the system