General
- Target Aesir-amd64
- Size 75.5MB
- Sample260701-17av7afs8k
- SHA256 ee7ddf560f39a2646bef5802aeb8c6da4a870375e94602b08c26d4989f505f40
- MD5 4ab9586363ce96b458e9c517f0ead598
- SHA1 5670b645ccc9dbd0541f57da3082baf867b406ed
- SHA512 f407822569053a7bf603797bef9d55cc881e72fb4a67a755e8a48937110335a5ea7e066b3b1ca05b65cff69825e14a4bd3610b0d86c81a6b8489500094f370d0
- SSDEEP 786432:GNyxQE4bq3tEKWD7GuuJfO3NlVWZCYWAyaxUi8svcPVqDyQ:Xfn3tEZf9uJ+NK/Msz
- TLSH T1D008B01077E48E1AD61F86394297C1258AF0F8971302E6CF2549E9D43F97FD26F362A2
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
Aesir-amd64
Resource
ubuntu2404-amd64-20260126-en
13 signatures
900 seconds
Malware Config
Targets
-
- Target Aesir-amd64
- Size 75.5MB
- SHA256 ee7ddf560f39a2646bef5802aeb8c6da4a870375e94602b08c26d4989f505f40
- MD5 4ab9586363ce96b458e9c517f0ead598
- SHA1 5670b645ccc9dbd0541f57da3082baf867b406ed
- SHA512 f407822569053a7bf603797bef9d55cc881e72fb4a67a755e8a48937110335a5ea7e066b3b1ca05b65cff69825e14a4bd3610b0d86c81a6b8489500094f370d0
- SSDEEP 786432:GNyxQE4bq3tEKWD7GuuJfO3NlVWZCYWAyaxUi8svcPVqDyQ:Xfn3tEZf9uJ+NK/Msz
- TLSH T1D008B01077E48E1AD61F86394297C1258AF0F8971302E6CF2549E9D43F97FD26F362A2
- MD5 SHA1 SHA512 SSDEEP TLSH
-
File and Directory Permissions Modification
Adversaries may modify file or directory permissions to evade defenses.
-
Checks hardware identifiers (DMI)
Checks DMI information which indicate if the system is a virtual machine.
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Reads hardware information
Accesses system info like serial numbers, manufacturer names etc.
MITRE ATT&CK Enterprise v16
Defense Evasion
File and Directory Permissions Modification
1Linux and Mac File and Directory Permissions Modification
1Virtualization/Sandbox Evasion
2System Checks
2