Overview

overview

10

Static

static

10

triangle

ubuntu-18.04-amd64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    triangle
  • Size 25KB
  • Sample260423-cpr5ragv4z
  • SHA256 455ab200b69db0f3d04203b7468eff43e328375510211400c2583e8063e6568a
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
ladvixbotnetdiscoveryexecutioninfectorlinuxpersistenceprivilege_escalationtrojan

Malware Config

Targets

    • Target
      triangle
    • Size 25KB
    • SHA256 455ab200b69db0f3d04203b7468eff43e328375510211400c2583e8063e6568a
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    10/10
    botnetdiscoveryexecutionladvixinfectorpersistenceprivilege_escalationtrojan

    • Contains strings common to LOLSquad DDoS tools

      Resembles a range of public tools written in C intended for DDoS attacks.

      botnet

    • Family: Ladvix

      Ladvix is a linux trojan and file infector first seen in 2022.

      trojaninfectorladvix

    • Executes dropped EXE

    • Creates/modifies Cron job

      Cron allows running tasks on a schedule, and is commonly used for malware persistence.

      executionpersistenceprivilege_escalation

    • Writes file to system bin folder

    behavioral1

MITRE ATT&CK Enterprise v16

Tasks