grimbolt | 24a11a26a2586f4fba7bfe89df2e21a0809ad85069e442da98c37c4add369a0c | Triage™

Login
Reports

Overview

overview

Static

static

support.elf

ubuntu-18.04-amd64

4

Sharing

Copy URL Twitter E-mail

General

Target
support.elf
Size 7.8MB
Sample260528-h987naa19v
SHA256 24a11a26a2586f4fba7bfe89df2e21a0809ad85069e442da98c37c4add369a0c
MD5 2654c08491a0f7c4a3dfc6282de5638b
SHA1 4b8ab808442bf7cb084fddf983a558c2cd4b3ff2
SHA512 2b1c6f52c0bef4fdae2e2965a14b3c5ae61c7b9009822f6ec4b3d6495aeffcaae3bea0fc7ab52093c993cc207f037a35488dcdd7a653952013cf9b75859bc57e
SSDEEP 98304:C//zl7M481oQdM5JH5eeGU19DGEIZDtAv5Ew+QsrtaDcE:iQ231DtWDyY
TLSH
T1A5869D04B7611CA5E19AC7348B1F95768DB4BCA20B24841F897EF2462FB7933E71B631
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

grimbolt unc6201 apt backdoor discovery linux

Static task

static1

2 signatures

backdoor apt unc6201 grimbolt

Behavioral task

behavioral1

Sample

support.elf

Resource

ubuntu1804-amd64-20260513-en

ubuntu-18.04-amd64

4 signatures

150 seconds

Malware Config

Targets

- Target
  support.elf
- Size 7.8MB
- SHA256 24a11a26a2586f4fba7bfe89df2e21a0809ad85069e442da98c37c4add369a0c
- MD5 2654c08491a0f7c4a3dfc6282de5638b
- SHA1 4b8ab808442bf7cb084fddf983a558c2cd4b3ff2
- SHA512 2b1c6f52c0bef4fdae2e2965a14b3c5ae61c7b9009822f6ec4b3d6495aeffcaae3bea0fc7ab52093c993cc207f037a35488dcdd7a653952013cf9b75859bc57e
- SSDEEP 98304:C//zl7M481oQdM5JH5eeGU19DGEIZDtAv5Ew+QsrtaDcE:iQ231DtWDyY
- TLSH
  T1A5869D04B7611CA5E19AC7348B1F95768DB4BCA20B24841F897EF2462FB7933E71B631
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

discovery
behavioral1

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

backdooraptunc6201grimbolt

behavioral1

© 2018-2026

Terms | Privacy