General
- Target b1ee45a84d93ac693f95caa82101559e9d5dabb7e5b15067ad58bf193c20707f
- Size 855KB
- Sample260716-etfzdsf191
- SHA256 b1ee45a84d93ac693f95caa82101559e9d5dabb7e5b15067ad58bf193c20707f
- MD5 fe9885d0230eb6797b695e203ba229d5
- SHA1 7fb858b5938c15bb53c72518524854e5cd2f92b6
- SHA512 041844e9f21ee62b1954a984cc9b4534c102f6c98ddc9adb6ceac69a63f4fee8fd06b8e90e108aa8e99a76afa642dcf26de4374db704ddd1969087e4d8323a92
- SSDEEP 12288:qglfBNgdY4IrdcHZ7jJ9pn0tArMvGwGayCWBHXlLOOpNTCpNB:qgdBNgdVfHF0tA4vGH/OSNTm
- TLSH T1E6157D2AF2F2E67DD00BC03047DBC6B15131F0755A322D7B26C09A353EAADA5171AB66
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
b1ee45a84d93ac693f95caa82101559e9d5dabb7e5b15067ad58bf193c20707f
Resource
ubuntu1804-amd64-20260513-en
Malware Config
Targets
-
- Target b1ee45a84d93ac693f95caa82101559e9d5dabb7e5b15067ad58bf193c20707f
- Size 855KB
- SHA256 b1ee45a84d93ac693f95caa82101559e9d5dabb7e5b15067ad58bf193c20707f
- MD5 fe9885d0230eb6797b695e203ba229d5
- SHA1 7fb858b5938c15bb53c72518524854e5cd2f92b6
- SHA512 041844e9f21ee62b1954a984cc9b4534c102f6c98ddc9adb6ceac69a63f4fee8fd06b8e90e108aa8e99a76afa642dcf26de4374db704ddd1969087e4d8323a92
- SSDEEP 12288:qglfBNgdY4IrdcHZ7jJ9pn0tArMvGwGayCWBHXlLOOpNTCpNB:qgdBNgdVfHF0tA4vGH/OSNTm
- TLSH T1E6157D2AF2F2E67DD00BC03047DBC6B15131F0755A322D7B26C09A353EAADA5171AB66
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Deletes itself
-
Executes dropped EXE
-
Creates/modifies Cron job
Cron allows running tasks on a schedule, and is commonly used for malware persistence.
-
Creates/modifies environment variables
Creating/modifying environment variables is a common persistence mechanism.
-
Enumerates running processes
Discovers information about currently running processes on the system
-
Modifies Bash startup script
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Event Triggered Execution
1Unix Shell Configuration Modification
1Hijack Execution Flow
1Path Interception by PATH Environment Variable
1Scheduled Task/Job
1Cron
1Privilege Escalation
Boot or Logon Autostart Execution
1Event Triggered Execution
1Unix Shell Configuration Modification
1Hijack Execution Flow
1Path Interception by PATH Environment Variable
1Scheduled Task/Job
1Cron
1