General
- Target i486.elf
- Size 81KB
- Sample260801-bt8gvscl7v
- SHA256 000d6d9e36795845c30894f29e7c3be7db37e1127e0a1e2b3cfcebd45e9cd9e0
- MD5 49e5c59818aa9de1822c6493a83e0926
- SHA1 a15fc14ac1434df8d027e00d6d68ddf012cdf579
- SHA512 310e8f2ca60fe3f3b2ed9d00eb9ba5c108bd94e6994a470f3f19447abb96daadf6e5ac84f86d749688b481c4e307a25ef617423b56be7743e0abbd186425416f
- SSDEEP 1536:mJPx87Gy00Ea/ZvmmvWFqnHoQWach2NUc31E+2QBweqZqr:mJZE/sa/RmmvWBVmC4/1
- TLSH T103836D89F793E0F4DD4705B1106BB77E8B30DE125024DE6BDB94BD72AC32A02A11A76C
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
i486.elf
Resource
ubuntu1804-amd64-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target i486.elf
- Size 81KB
- SHA256 000d6d9e36795845c30894f29e7c3be7db37e1127e0a1e2b3cfcebd45e9cd9e0
- MD5 49e5c59818aa9de1822c6493a83e0926
- SHA1 a15fc14ac1434df8d027e00d6d68ddf012cdf579
- SHA512 310e8f2ca60fe3f3b2ed9d00eb9ba5c108bd94e6994a470f3f19447abb96daadf6e5ac84f86d749688b481c4e307a25ef617423b56be7743e0abbd186425416f
- SSDEEP 1536:mJPx87Gy00Ea/ZvmmvWFqnHoQWach2NUc31E+2QBweqZqr:mJZE/sa/RmmvWBVmC4/1
- TLSH T103836D89F793E0F4DD4705B1106BB77E8B30DE125024DE6BDB94BD72AC32A02A11A76C
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Deletes itself
-
Enumerates running processes
Discovers information about currently running processes on the system
-
Modifies systemd
Adds/ modifies systemd service files. Likely to achieve persistence.
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1XDG Autostart Entries
1Create or Modify System Process
1Systemd Service
1Privilege Escalation
Boot or Logon Autostart Execution
1XDG Autostart Entries
1Create or Modify System Process
1Systemd Service
1