General
- Target 176.65.139.68_sample.bin
- Size 2.1MB
- Sample260510-pcfbmsax6k
- SHA256 91a62cbcc0bd9628da12416edf34ed9ae18008cb060093ab7543c9c461b759b1
- MD5 93676e423e0ecaad2134d7cae4712431
- SHA1 e7fb47754e96b4f2993170028f5e7f52e6639ed7
- SHA512 65768f3665103e4a3353467ac71f8c53d85c7512d28e33e8bf96f82c13a3dcb3742708144550fafdab67d3e090f298cf7d8dc12d74b03cb48251ed162768817f
- SSDEEP 49152:Re/9MlS2pwdcn+B9/P1qIGa4CBJwb/DOdYqJrKGS0hLfd9/W:M/+twqGVP1ZG+B+rkYqJrK0xTe
- TLSH T1B8A53305897386A7A309207E31F58FFED8DE11BBE0A743C2C5D8DA4995096F7ABC4349
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
176.65.139.68_sample.bin
Resource
ubuntu1804-amd64-20260126-en
Malware Config
Targets
-
- Target 176.65.139.68_sample.bin
- Size 2.1MB
- SHA256 91a62cbcc0bd9628da12416edf34ed9ae18008cb060093ab7543c9c461b759b1
- MD5 93676e423e0ecaad2134d7cae4712431
- SHA1 e7fb47754e96b4f2993170028f5e7f52e6639ed7
- SHA512 65768f3665103e4a3353467ac71f8c53d85c7512d28e33e8bf96f82c13a3dcb3742708144550fafdab67d3e090f298cf7d8dc12d74b03cb48251ed162768817f
- SSDEEP 49152:Re/9MlS2pwdcn+B9/P1qIGa4CBJwb/DOdYqJrKGS0hLfd9/W:M/+twqGVP1ZG+B+rkYqJrK0xTe
- TLSH T1B8A53305897386A7A309207E31F58FFED8DE11BBE0A743C2C5D8DA4995096F7ABC4349
- MD5 SHA1 SHA512 SSDEEP TLSH
Contacts a large (11448) amount of remote hosts
This may indicate a network scan to discover remotely running services.
Creates a large amount of network flows
This may indicate a network scan to discover remotely running services.
Creates/modifies Cron job
Cron allows running tasks on a schedule, and is commonly used for malware persistence.
Creates/modifies environment variables
Creating/modifying environment variables is a common persistence mechanism.
Modifies systemd
Adds/ modifies systemd service files. Likely to achieve persistence.
Writes file to system bin folder
Modifies Bash startup script
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
3XDG Autostart Entries
1Boot or Logon Initialization Scripts
1RC Scripts
1Create or Modify System Process
1Systemd Service
1Event Triggered Execution
1Unix Shell Configuration Modification
1Hijack Execution Flow
1Path Interception by PATH Environment Variable
1Scheduled Task/Job
1Cron
1Privilege Escalation
Boot or Logon Autostart Execution
3XDG Autostart Entries
1Boot or Logon Initialization Scripts
1RC Scripts
1Create or Modify System Process
1Systemd Service
1Event Triggered Execution
1Unix Shell Configuration Modification
1Hijack Execution Flow
1Path Interception by PATH Environment Variable
1Scheduled Task/Job
1Cron
1