General
- Target ksoftirqd0
- Size 1.4MB
- Sample260728-pmwflshm6t
- SHA256 e15d8c889faf0588ca9679414c588588c546c5c71ce0e167a6dce2482817b42a
- MD5 73126ebdf2efc6de16e2e7e5a286c892
- SHA1 6bd53af2aff7e10d2867aa5ec50901810e750f2a
- SHA512 cc4527ca661d07d16aa602666c4048f9448533126a4b913b12cda10f804c299bcf9028f9079d8bde629b131140be5dc77b5feefcbfbbd5f54e61782268650be8
- SSDEEP 24576:WnAMgJz9GIbtfp3EnM5BHYspq29vMKjZ7IBjugdoePvD6Teht4+pOKAVloo+s5o6:9MR8tfFEM3HDpq2VMEZ7I3nIUUVloo+2
- TLSH T1DD65332710E7A9BEB270F128AB4A5A5BC84D0537B5E7763D09780ECEB9DD48DB15C340
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
ksoftirqd0
Resource
ubuntu1804-amd64-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target ksoftirqd0
- Size 1.4MB
- SHA256 e15d8c889faf0588ca9679414c588588c546c5c71ce0e167a6dce2482817b42a
- MD5 73126ebdf2efc6de16e2e7e5a286c892
- SHA1 6bd53af2aff7e10d2867aa5ec50901810e750f2a
- SHA512 cc4527ca661d07d16aa602666c4048f9448533126a4b913b12cda10f804c299bcf9028f9079d8bde629b131140be5dc77b5feefcbfbbd5f54e61782268650be8
- SSDEEP 24576:WnAMgJz9GIbtfp3EnM5BHYspq29vMKjZ7IBjugdoePvD6Teht4+pOKAVloo+s5o6:9MR8tfFEM3HDpq2VMEZ7I3nIUUVloo+2
- TLSH T1DD65332710E7A9BEB270F128AB4A5A5BC84D0537B5E7763D09780ECEB9DD48DB15C340
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Creates/modifies Cron job
Cron allows running tasks on a schedule, and is commonly used for malware persistence.
-
Enumerates running processes
Discovers information about currently running processes on the system