General
- Target x86_64.elf
- Size 138KB
- Sample260806-jff5fs1tas
- SHA256 967bcecd7d0f07d801140a5c2159873c2220a57052d0ed2718dfcd4e960f81e7
- MD5 94630ad62a7ade0bf628f682711d6d25
- SHA1 c12e6539c8a6ac41fef9ad42aad4d56ddbb839d7
- SHA512 da293a45841a5f69537ecd7b4db528f6fcdad99c1e0cac7b07e1b389980527bd35460c5e25543f8a6c84f34787a8d043c40e74ade6c4bfd8df9c2f3cdea495a3
- SSDEEP 3072:WHX3eBHqR1v5KquQta6ihRRuCgDauDV8b7b:W8qR1gCShuCoab7b
- TLSH T18BD33B02A58080FDC49AD274879FD137FB32F89912347B1F3B946E612D3AF616B5A781
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
x86_64.elf
Resource
ubuntu1804-amd64-20260513-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target x86_64.elf
- Size 138KB
- SHA256 967bcecd7d0f07d801140a5c2159873c2220a57052d0ed2718dfcd4e960f81e7
- MD5 94630ad62a7ade0bf628f682711d6d25
- SHA1 c12e6539c8a6ac41fef9ad42aad4d56ddbb839d7
- SHA512 da293a45841a5f69537ecd7b4db528f6fcdad99c1e0cac7b07e1b389980527bd35460c5e25543f8a6c84f34787a8d043c40e74ade6c4bfd8df9c2f3cdea495a3
- SSDEEP 3072:WHX3eBHqR1v5KquQta6ihRRuCgDauDV8b7b:W8qR1gCShuCoab7b
- TLSH T18BD33B02A58080FDC49AD274879FD137FB32F89912347B1F3B946E612D3AF616B5A781
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Creates/modifies Cron job
Cron allows running tasks on a schedule, and is commonly used for malware persistence.
-
Modifies systemd
Adds/ modifies systemd service files. Likely to achieve persistence.
-
Write file to user bin folder
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
2XDG Autostart Entries
1Boot or Logon Initialization Scripts
1RC Scripts
1Create or Modify System Process
1Systemd Service
1Scheduled Task/Job
1Cron
1