General
- Target disconnectraw.x86_64.elf
- Size 134KB
- Sample260806-grqf6aga97
- SHA256 061c95f6e18dc10f64c5bc442084e7333fc56462bb0da197dd15f9ef2efbd0c7
- MD5 945ea1f8013b8327c99941f4f3d279bf
- SHA1 740a50c6415a31b631f8c8e63c5cc3a03802f6e4
- SHA512 976edcf8856995a4de22f1a2289fddc49658426db71f86bca737cc67ef598cf4e85294c98a5e4b44dd9b3e6ae3401560ee7eb8f392342a7301158637e886761a
- SSDEEP 1536:9tKyoeXKPXUv7lRa9Q6tBgqEZriZmgD8jUmcb0Va+3UHoMRZJMy28eNqgRM/+sIp:91osKPXUvHqhjZPxnLd+4OsIPIiXbDH
- TLSH T12BD34B13A48080FDC49BD2708B9FD137EB32F89912347B1E2B947E612D36F616B5A791
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
disconnectraw.x86_64.elf
Resource
ubuntu1804-amd64-20260513-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target disconnectraw.x86_64.elf
- Size 134KB
- SHA256 061c95f6e18dc10f64c5bc442084e7333fc56462bb0da197dd15f9ef2efbd0c7
- MD5 945ea1f8013b8327c99941f4f3d279bf
- SHA1 740a50c6415a31b631f8c8e63c5cc3a03802f6e4
- SHA512 976edcf8856995a4de22f1a2289fddc49658426db71f86bca737cc67ef598cf4e85294c98a5e4b44dd9b3e6ae3401560ee7eb8f392342a7301158637e886761a
- SSDEEP 1536:9tKyoeXKPXUv7lRa9Q6tBgqEZriZmgD8jUmcb0Va+3UHoMRZJMy28eNqgRM/+sIp:91osKPXUvHqhjZPxnLd+4OsIPIiXbDH
- TLSH T12BD34B13A48080FDC49BD2708B9FD137EB32F89912347B1E2B947E612D36F616B5A791
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Creates/modifies Cron job
Cron allows running tasks on a schedule, and is commonly used for malware persistence.
-
Modifies systemd
Adds/ modifies systemd service files. Likely to achieve persistence.
-
Write file to user bin folder
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
2XDG Autostart Entries
1Boot or Logon Initialization Scripts
1RC Scripts
1Create or Modify System Process
1Systemd Service
1Scheduled Task/Job
1Cron
1