General
- Target killbotx.x86_64.elf
- Size 102KB
- Sample260806-c54tgssala
- SHA256 07310b71a33cb76729daed760d08efb079b4591db5b62c647e4deeacb2556e2b
- MD5 295f892ac5feb6333dc52ae20eae8a85
- SHA1 7b34ace5b1a37aef96f8cc99570051af7bfc4f96
- SHA512 57970ebd67cb874060de3bd33be5fcb3471344b1b416fd7efcbf0ebfacd9d78a8eaafbfbf8d2b05c721a1f0f3d8c84522f2cf2e543cd57f812d53f713bdd078f
- SSDEEP 1536:CxAXe0QXW3LFgkogUKqfVKl1KkzS916LKtZWw+6ppxd9iZrQbInyNLor:y0SW3WFs3wkmOhC98Ubmf
- TLSH T1FAA34D02B49180FED49AD174879FD137EB32F98512347B5F2B847E312E36F222B5A691
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
killbotx.x86_64.elf
Resource
ubuntu1804-amd64-20260513-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target killbotx.x86_64.elf
- Size 102KB
- SHA256 07310b71a33cb76729daed760d08efb079b4591db5b62c647e4deeacb2556e2b
- MD5 295f892ac5feb6333dc52ae20eae8a85
- SHA1 7b34ace5b1a37aef96f8cc99570051af7bfc4f96
- SHA512 57970ebd67cb874060de3bd33be5fcb3471344b1b416fd7efcbf0ebfacd9d78a8eaafbfbf8d2b05c721a1f0f3d8c84522f2cf2e543cd57f812d53f713bdd078f
- SSDEEP 1536:CxAXe0QXW3LFgkogUKqfVKl1KkzS916LKtZWw+6ppxd9iZrQbInyNLor:y0SW3WFs3wkmOhC98Ubmf
- TLSH T1FAA34D02B49180FED49AD174879FD137EB32F98512347B5F2B847E312E36F222B5A691
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Creates/modifies Cron job
Cron allows running tasks on a schedule, and is commonly used for malware persistence.
-
Modifies systemd
Adds/ modifies systemd service files. Likely to achieve persistence.
-
Write file to user bin folder
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
2XDG Autostart Entries
1Boot or Logon Initialization Scripts
1RC Scripts
1Create or Modify System Process
1Systemd Service
1Scheduled Task/Job
1Cron
1