General
- Target mean.elf
- Size 12.3MB
- Sample260724-tbhgtstdjb
- SHA256 6af897100a59e2259c0cb2236b1b586521d6cc7019273122f11de7ee912e648a
- MD5 0ef48ff27d3d493d11c953e2572a63fa
- SHA1 54799cf072dfb0732999833df9fbc9764a2a2808
- SHA512 c64d25b7d413c8bcf646078acdbd98270d8af38f05130df53b381d59937f5e0eeed40e6c6a6b4092ccb750404e475906922b769c81b03f4710fdb1e146e7c261
- SSDEEP 98304:3s/UITIuD5NfE41RKYq7QXSG42YaYD/EypZlqEQNWEZ:3V0IuU4WJ0iG4d9/GPZ
- TLSH T18FD63A63E8EB5694C4EE8570C772817BBA713C491B3823D74390F3246B36BD0AAB6745
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
mean.elf
Resource
ubuntu2404-amd64-20260126-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target mean.elf
- Size 12.3MB
- SHA256 6af897100a59e2259c0cb2236b1b586521d6cc7019273122f11de7ee912e648a
- MD5 0ef48ff27d3d493d11c953e2572a63fa
- SHA1 54799cf072dfb0732999833df9fbc9764a2a2808
- SHA512 c64d25b7d413c8bcf646078acdbd98270d8af38f05130df53b381d59937f5e0eeed40e6c6a6b4092ccb750404e475906922b769c81b03f4710fdb1e146e7c261
- SSDEEP 98304:3s/UITIuD5NfE41RKYq7QXSG42YaYD/EypZlqEQNWEZ:3V0IuU4WJ0iG4d9/GPZ
- TLSH T18FD63A63E8EB5694C4EE8570C772817BBA713C491B3823D74390F3246B36BD0AAB6745
- MD5 SHA1 SHA512 SSDEEP TLSH
-
OS Credential Dumping
Adversaries may attempt to dump credentials to use it in password cracking.
-
Abuse Elevation Control Mechanism: Sudo and Sudo Caching
Abuse sudo or cached sudo credentials to execute code.
-
Enumerates running processes
Discovers information about currently running processes on the system