General
- Target boss
- Size 2.3MB
- Sample260623-pe4f9acw5j
- SHA256 6f05e0818ca6375d0fcc9fae96d16a7a979bdf8d4f85df652654e11c2ca21249
- MD5 8b52820dd085bd5d8efa6570862e000e
- SHA1 aae69bb3c738fe2488a0b2fff28e4b677592d175
- SHA512 5d421c061acf184adfae8f39cd21466b57d4a671fbde9dc85b85c9026be9f3edac45b6981521b03797c63680f5abecb0264ffdcfe46e1f8d25b955e967db8c71
- SSDEEP 49152:Jv+UKkhbC5+b30qpW9ZlUIyoVWPR+tWTl3Ad7M+y:J25ViRX3AZMP
- TLSH T1A7B57C077CE119AAC0AA93328DB651A2BBB1FC490B7123D72E50B3782F727D45E35794
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
boss
Resource
ubuntu1804-amd64-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target boss
- Size 2.3MB
- SHA256 6f05e0818ca6375d0fcc9fae96d16a7a979bdf8d4f85df652654e11c2ca21249
- MD5 8b52820dd085bd5d8efa6570862e000e
- SHA1 aae69bb3c738fe2488a0b2fff28e4b677592d175
- SHA512 5d421c061acf184adfae8f39cd21466b57d4a671fbde9dc85b85c9026be9f3edac45b6981521b03797c63680f5abecb0264ffdcfe46e1f8d25b955e967db8c71
- SSDEEP 49152:Jv+UKkhbC5+b30qpW9ZlUIyoVWPR+tWTl3Ad7M+y:J25ViRX3AZMP
- TLSH T1A7B57C077CE119AAC0AA93328DB651A2BBB1FC490B7123D72E50B3782F727D45E35794
- MD5 SHA1 SHA512 SSDEEP TLSH
-
File and Directory Permissions Modification
Adversaries may modify file or directory permissions to evade defenses.
-
Enumerates running processes
Discovers information about currently running processes on the system
-
Modifies systemd
Adds/ modifies systemd service files. Likely to achieve persistence.
-
Write file to user bin folder
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1XDG Autostart Entries
1Create or Modify System Process
1Systemd Service
1Privilege Escalation
Boot or Logon Autostart Execution
1XDG Autostart Entries
1Create or Modify System Process
1Systemd Service
1