General
- Target iran.x86_64.elf
- Size 161KB
- Sample260430-cd2vtaas61
- SHA256 c2a18aa6bc7c130cba97b02b96f47b3b3e71f08e4b4b48fe678ab70ac2aa21d8
- MD5 e3bad03842a69fdb1c826fcbb04ce5bc
- SHA1 0d5d0e35c3e9d2e113f2fe87c9428f2a9da37f14
- SHA512 ac18983d6888e7b46c57896ad04e9b52f516900408169164f54f7f0ff5e14ce1435e5fe926a99c5c01f64c8085177d92d14cb7ffac6c704ee586396fa6358376
- SSDEEP 3072:AOIlwO5WGRZD96iqCLzM1J1vhoYpllDCZpEfkLTsY8OVno7ZEX:0lwC6/LJ/+zpAE
- TLSH T13EF339037AC289FEC497D1F44BFB95359D32F81E1531728A6794BEA62F48EE02A1C750
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
iran.x86_64.elf
Resource
ubuntu1804-amd64-20260126-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target iran.x86_64.elf
- Size 161KB
- SHA256 c2a18aa6bc7c130cba97b02b96f47b3b3e71f08e4b4b48fe678ab70ac2aa21d8
- MD5 e3bad03842a69fdb1c826fcbb04ce5bc
- SHA1 0d5d0e35c3e9d2e113f2fe87c9428f2a9da37f14
- SHA512 ac18983d6888e7b46c57896ad04e9b52f516900408169164f54f7f0ff5e14ce1435e5fe926a99c5c01f64c8085177d92d14cb7ffac6c704ee586396fa6358376
- SSDEEP 3072:AOIlwO5WGRZD96iqCLzM1J1vhoYpllDCZpEfkLTsY8OVno7ZEX:0lwC6/LJ/+zpAE
- TLSH T13EF339037AC289FEC497D1F44BFB95359D32F81E1531728A6794BEA62F48EE02A1C750
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Deletes itself
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Enumerates running processes
Discovers information about currently running processes on the system