General
- Target amd64
- Size 5.8MB
- Sample260628-pc33psg16k
- SHA256 ba01bc4f787871ce0f3ab3c2382cf5fe250dbdda7a06bdf38908d22fe79d6b8a
- MD5 0bf2c86cbb592b54fe0bc1ee0ec1f686
- SHA1 49bd72cb73e6306ea0a332cd1b8683a2b6e86965
- SHA512 9c8abcd0a816c2cae33621161898aee967a562fcd6af76a491a4937b3bb2563f790a973c3b5c347d4009a90a3f0fc0f8e8105d3896baa27f30cea95afae98e85
- SSDEEP 49152:4nFAt/cznBAdT8Eih8qSEiMDCs4qvlZz5oSe8iRQJfL9NinKlK1KcglCQ5ED:4necjZZOB8vW5w9ED
- TLSH T162565A57EC9514E9C0AE9230CA729153BB717C991F3123D32BA0B6382F77BD0A9B9354
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
amd64
Resource
ubuntu1804-amd64-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target amd64
- Size 5.8MB
- SHA256 ba01bc4f787871ce0f3ab3c2382cf5fe250dbdda7a06bdf38908d22fe79d6b8a
- MD5 0bf2c86cbb592b54fe0bc1ee0ec1f686
- SHA1 49bd72cb73e6306ea0a332cd1b8683a2b6e86965
- SHA512 9c8abcd0a816c2cae33621161898aee967a562fcd6af76a491a4937b3bb2563f790a973c3b5c347d4009a90a3f0fc0f8e8105d3896baa27f30cea95afae98e85
- SSDEEP 49152:4nFAt/cznBAdT8Eih8qSEiMDCs4qvlZz5oSe8iRQJfL9NinKlK1KcglCQ5ED:4necjZZOB8vW5w9ED
- TLSH T162565A57EC9514E9C0AE9230CA729153BB717C991F3123D32BA0B6382F77BD0A9B9354
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Creates/modifies environment variables
Creating/modifying environment variables is a common persistence mechanism.
-
Write file to user bin folder
-
Modifies Bash startup script
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Event Triggered Execution
1Unix Shell Configuration Modification
1Hijack Execution Flow
1Path Interception by PATH Environment Variable
1Privilege Escalation
Boot or Logon Autostart Execution
1Event Triggered Execution
1Unix Shell Configuration Modification
1Hijack Execution Flow
1Path Interception by PATH Environment Variable
1