Resubmissions

02/07/2026, 18:17

260702-wwzyqabw9x10

24/04/2026, 23:18

260424-3aa6ssft5k10

General

  • Target
    jade.x86.elf
  • Size 68KB
  • Sample260424-3aa6ssft5k
  • SHA256 36f9404b02c73eb73585e6db898925705a5f0b9a48aa0607b5e2aef924ec63ca
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      jade.x86.elf
    • Size 68KB
    • SHA256 36f9404b02c73eb73585e6db898925705a5f0b9a48aa0607b5e2aef924ec63ca
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Contacts a large (232236) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Enumerates active TCP sockets

      Gets active TCP sockets from /proc virtual filesystem.

    • Enumerates running processes

      Discovers information about currently running processes on the system

MITRE ATT&CK Enterprise v16

Tasks