General
- Target b72c0501d051093ba42cd61e56a3e744b6427db0a2bc026db404978955b9b9a1
- Size 56KB
- Sample260710-3hs2ksfs6p
- SHA256 b72c0501d051093ba42cd61e56a3e744b6427db0a2bc026db404978955b9b9a1
- MD5 30312331655882e62206f7fa3d060498
- SHA1 0b3422c45a4aff2c6d9c36c11b70ed77c26ada10
- SHA512 2e9a69f1d0d962f55159aa7481983537fa6bf24832356acf87a76b9af230ff87137d2ae82a28bbdb4976f4f28e5ca2fcd165b6aeb212f7ba06074e46ba6b35ee
- SSDEEP 1536:AlkjMaUWh8h10hjorxJRg0qKua+q439Hiq2qGJ9Drsbmnouy8DM5:KaN8hKjmxIMuDpbWoutDM5
- TLSH T16D4302CA9EC9DBACEA1F813E2C573FE70D20F59F514183867BBC14A361655202C45AFA
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
b72c0501d051093ba42cd61e56a3e744b6427db0a2bc026db404978955b9b9a1
Resource
ubuntu1804-amd64-20260513-en
Malware Config
Targets
-
- Target b72c0501d051093ba42cd61e56a3e744b6427db0a2bc026db404978955b9b9a1
- Size 56KB
- SHA256 b72c0501d051093ba42cd61e56a3e744b6427db0a2bc026db404978955b9b9a1
- MD5 30312331655882e62206f7fa3d060498
- SHA1 0b3422c45a4aff2c6d9c36c11b70ed77c26ada10
- SHA512 2e9a69f1d0d962f55159aa7481983537fa6bf24832356acf87a76b9af230ff87137d2ae82a28bbdb4976f4f28e5ca2fcd165b6aeb212f7ba06074e46ba6b35ee
- SSDEEP 1536:AlkjMaUWh8h10hjorxJRg0qKua+q439Hiq2qGJ9Drsbmnouy8DM5:KaN8hKjmxIMuDpbWoutDM5
- TLSH T16D4302CA9EC9DBACEA1F813E2C573FE70D20F59F514183867BBC14A361655202C45AFA
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Deletes itself
-
Creates/modifies Cron job
Cron allows running tasks on a schedule, and is commonly used for malware persistence.
-
Creates/modifies environment variables
Creating/modifying environment variables is a common persistence mechanism.
-
Modifies systemd
Adds/ modifies systemd service files. Likely to achieve persistence.
-
Modifies Bash startup script
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
4XDG Autostart Entries
1Boot or Logon Initialization Scripts
2RC Scripts
2Create or Modify System Process
1Systemd Service
1Event Triggered Execution
1Unix Shell Configuration Modification
1Hijack Execution Flow
1Path Interception by PATH Environment Variable
1Scheduled Task/Job
1Cron
1Privilege Escalation
Boot or Logon Autostart Execution
4XDG Autostart Entries
1Boot or Logon Initialization Scripts
2RC Scripts
2Create or Modify System Process
1Systemd Service
1Event Triggered Execution
1Unix Shell Configuration Modification
1Hijack Execution Flow
1Path Interception by PATH Environment Variable
1Scheduled Task/Job
1Cron
1