General
- Target amd
- Size 5.0MB
- Sample260729-w6ltvazble
- SHA256 2d8b09556b0e45a68e466079e1b3e9446c94d3e671d84aeef4ea5c200d8f6255
- MD5 8295e858eaa1d0a69137e105df6dd690
- SHA1 56397acb2f138d61feba218c6207c684ce1da84f
- SHA512 3e698d3550ecb94b38766f47f4d20e53ed4b7f4ed3146a272192c35e801d93f67d304f398d1ca84c404bc545551c8912eb8447510e3bcdcd1c39bfa0add22ee5
- SSDEEP 49152:FGKPMxchyyTrCXDMrTZ3+tVNfEP2KmpAX5EWOigY/zA95xwR:TMmhyyTSe3+BnUExvxa
- TLSH T173363A57EC9586E9D0EAD1308A629252BB717C485B3123D72F90F7783F72BD0AA79340
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
amd
Resource
ubuntu1804-amd64-20260513-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target amd
- Size 5.0MB
- SHA256 2d8b09556b0e45a68e466079e1b3e9446c94d3e671d84aeef4ea5c200d8f6255
- MD5 8295e858eaa1d0a69137e105df6dd690
- SHA1 56397acb2f138d61feba218c6207c684ce1da84f
- SHA512 3e698d3550ecb94b38766f47f4d20e53ed4b7f4ed3146a272192c35e801d93f67d304f398d1ca84c404bc545551c8912eb8447510e3bcdcd1c39bfa0add22ee5
- SSDEEP 49152:FGKPMxchyyTrCXDMrTZ3+tVNfEP2KmpAX5EWOigY/zA95xwR:TMmhyyTSe3+BnUExvxa
- TLSH T173363A57EC9586E9D0EAD1308A629252BB717C485B3123D72F90F7783F72BD0AA79340
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Modifies Watchdog functionality
Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.
-
Creates/modifies environment variables
Creating/modifying environment variables is a common persistence mechanism.
-
Modifies Bash startup script
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
2Boot or Logon Initialization Scripts
1RC Scripts
1Event Triggered Execution
1Unix Shell Configuration Modification
1Hijack Execution Flow
1Path Interception by PATH Environment Variable
1Privilege Escalation
Boot or Logon Autostart Execution
2Boot or Logon Initialization Scripts
1RC Scripts
1Event Triggered Execution
1Unix Shell Configuration Modification
1Hijack Execution Flow
1Path Interception by PATH Environment Variable
1