General
- Target amd64.elf
- Size 4.7MB
- Sample260510-phebjabs3n
- SHA256 3748ac46365da967842bc6208c880ea7bab92458f2ada64bafb2c911f4c0af90
- MD5 68df256906f64c700c948c255d6f95eb
- SHA1 efa81b1f2b989a15cbcbf69f4cacd632140f0260
- SHA512 07d2e90c1300a44e0b55a6ec37e1011bb282650bcbe41b1bf72564439c32c7c9412e41f10b461258fd5c6a385b5348ee50717d976e25a47b04e1ff6e2019a08c
- SSDEEP 49152:6D3PCIClAuQ8L12I7GbraWm5EBbSbZYZo8UxYh5a64O:pIClZQ7I7QiEY2hUZO
- TLSH T112363B17EC9586E8C0EAE23089629253BE717C495B3023D72F50F7392F72BD4AA79744
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
amd64.elf
Resource
ubuntu1804-amd64-20260127-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target amd64.elf
- Size 4.7MB
- SHA256 3748ac46365da967842bc6208c880ea7bab92458f2ada64bafb2c911f4c0af90
- MD5 68df256906f64c700c948c255d6f95eb
- SHA1 efa81b1f2b989a15cbcbf69f4cacd632140f0260
- SHA512 07d2e90c1300a44e0b55a6ec37e1011bb282650bcbe41b1bf72564439c32c7c9412e41f10b461258fd5c6a385b5348ee50717d976e25a47b04e1ff6e2019a08c
- SSDEEP 49152:6D3PCIClAuQ8L12I7GbraWm5EBbSbZYZo8UxYh5a64O:pIClZQ7I7QiEY2hUZO
- TLSH T112363B17EC9586E8C0EAE23089629253BE717C495B3023D72F50F7392F72BD4AA79744
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Creates/modifies environment variables
Creating/modifying environment variables is a common persistence mechanism.
-
Write file to user bin folder
-
Modifies Bash startup script
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Event Triggered Execution
1Unix Shell Configuration Modification
1Hijack Execution Flow
1Path Interception by PATH Environment Variable
1Privilege Escalation
Boot or Logon Autostart Execution
1Event Triggered Execution
1Unix Shell Configuration Modification
1Hijack Execution Flow
1Path Interception by PATH Environment Variable
1