General
- Target amd64.elf
- Size 5.7MB
- Sample260628-dvktasez51
- SHA256 ddcb3ddec77d47804ea560d2ac6459925d85236a52854fd7106653c41128e49f
- MD5 00041b0fdcd7183256e416330bc817b7
- SHA1 7ab01ed50c56fca004cdaf6ba0a3b700f2917249
- SHA512 23e18912c60bc3ba657fda823ad0d0fb1c8677b5ec815ad3202158b5ca7ec3758420fd8221a61342ec36a4cb4a5b43f9bb69aef313d7cc7e9a9795ba69f3cc72
- SSDEEP 49152:sRDGf29AEbeaAz1hlTAKVPnGC5Wl1sWpPWCtRL631FvECCviNNB/KlK1KcJJH5E7:sR1910cPWsePfJhJzE7
- TLSH T139564A17ECA555E9C0AED2308A62A553BB71BC492B3163D32B50F3382F77BD06A79344
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
amd64.elf
Resource
ubuntu1804-amd64-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target amd64.elf
- Size 5.7MB
- SHA256 ddcb3ddec77d47804ea560d2ac6459925d85236a52854fd7106653c41128e49f
- MD5 00041b0fdcd7183256e416330bc817b7
- SHA1 7ab01ed50c56fca004cdaf6ba0a3b700f2917249
- SHA512 23e18912c60bc3ba657fda823ad0d0fb1c8677b5ec815ad3202158b5ca7ec3758420fd8221a61342ec36a4cb4a5b43f9bb69aef313d7cc7e9a9795ba69f3cc72
- SSDEEP 49152:sRDGf29AEbeaAz1hlTAKVPnGC5Wl1sWpPWCtRL631FvECCviNNB/KlK1KcJJH5E7:sR1910cPWsePfJhJzE7
- TLSH T139564A17ECA555E9C0AED2308A62A553BB71BC492B3163D32B50F3382F77BD06A79344
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Creates/modifies environment variables
Creating/modifying environment variables is a common persistence mechanism.
-
Write file to user bin folder
-
Modifies Bash startup script
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Event Triggered Execution
1Unix Shell Configuration Modification
1Hijack Execution Flow
1Path Interception by PATH Environment Variable
1Privilege Escalation
Boot or Logon Autostart Execution
1Event Triggered Execution
1Unix Shell Configuration Modification
1Hijack Execution Flow
1Path Interception by PATH Environment Variable
1