General
- Target i386.elf
- Size 5.5MB
- Sample260628-dvlqlaez7q
- SHA256 db11e9ffefc70af6f51b4ffd4c0d127d0dd075667b62a48c095a211c4364c41d
- MD5 fadb789df82b02628d28583f149e9b5a
- SHA1 3d0920ed4a294a1147903233bef23007d8201320
- SHA512 5372bfb77321d2761e5da676086689957aa679c799466390c63b20fa1d7968bf8d641e8801ef01e81898136f6aaea757d69b22d4cc8bbffcdd5fd2cd52758a8a
- SSDEEP 49152:+m4AV7kST2vASSXumIYTtWXdVyi67JrcwxG2tahapP4WZDvFwfk8aCI5Ek:+qkST2fSAYTtIdVyz7u2jAW5Ek
- TLSH T197461711FECB14F6E9031E3108BBA26F63355D058B24EBD7EB407E69F97B6911932209
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
i386.elf
Resource
ubuntu1804-amd64-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target i386.elf
- Size 5.5MB
- SHA256 db11e9ffefc70af6f51b4ffd4c0d127d0dd075667b62a48c095a211c4364c41d
- MD5 fadb789df82b02628d28583f149e9b5a
- SHA1 3d0920ed4a294a1147903233bef23007d8201320
- SHA512 5372bfb77321d2761e5da676086689957aa679c799466390c63b20fa1d7968bf8d641e8801ef01e81898136f6aaea757d69b22d4cc8bbffcdd5fd2cd52758a8a
- SSDEEP 49152:+m4AV7kST2vASSXumIYTtWXdVyi67JrcwxG2tahapP4WZDvFwfk8aCI5Ek:+qkST2fSAYTtIdVyz7u2jAW5Ek
- TLSH T197461711FECB14F6E9031E3108BBA26F63355D058B24EBD7EB407E69F97B6911932209
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Creates/modifies environment variables
Creating/modifying environment variables is a common persistence mechanism.
-
Write file to user bin folder
-
Modifies Bash startup script
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Event Triggered Execution
1Unix Shell Configuration Modification
1Hijack Execution Flow
1Path Interception by PATH Environment Variable
1Privilege Escalation
Boot or Logon Autostart Execution
1Event Triggered Execution
1Unix Shell Configuration Modification
1Hijack Execution Flow
1Path Interception by PATH Environment Variable
1