General
- Target x86.elf
- Size 145KB
- Sample260806-mlrd6ayfmd
- SHA256 9a26c7ac75b0c066341ec9ce7011849025c05b6b97fb7ad8f36ce0f6870b4d37
- MD5 cff7b90b2a979ba797fdab6fac4321c6
- SHA1 2f02abfa4e2f361e6e0c9e9296f700342066f25a
- SHA512 9c6803b6c5ef4955fcc7d3b5d6476f527df98ffea2580e50b66ba147ef83b371b20e94d09d3b6926b5992ac30a727778e4283c93c41dfca5ba231fd85a957103
- SSDEEP 3072:NIgQXXim6tQLgbWayB4nxqFkw8poFunpC6QH6aD2TDov1:Kgiq4gWa04nHpCRV0ot
- TLSH T134E36B82FB93D2F1E59305B0002BB71F8B349D398124DE4AEBA92E31EC75706955B67C
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
x86.elf
Resource
ubuntu1804-amd64-20260513-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target x86.elf
- Size 145KB
- SHA256 9a26c7ac75b0c066341ec9ce7011849025c05b6b97fb7ad8f36ce0f6870b4d37
- MD5 cff7b90b2a979ba797fdab6fac4321c6
- SHA1 2f02abfa4e2f361e6e0c9e9296f700342066f25a
- SHA512 9c6803b6c5ef4955fcc7d3b5d6476f527df98ffea2580e50b66ba147ef83b371b20e94d09d3b6926b5992ac30a727778e4283c93c41dfca5ba231fd85a957103
- SSDEEP 3072:NIgQXXim6tQLgbWayB4nxqFkw8poFunpC6QH6aD2TDov1:Kgiq4gWa04nHpCRV0ot
- TLSH T134E36B82FB93D2F1E59305B0002BB71F8B349D398124DE4AEBA92E31EC75706955B67C
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Creates/modifies Cron job
Cron allows running tasks on a schedule, and is commonly used for malware persistence.
-
Modifies systemd
Adds/ modifies systemd service files. Likely to achieve persistence.
-
Write file to user bin folder
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
2XDG Autostart Entries
1Boot or Logon Initialization Scripts
1RC Scripts
1Create or Modify System Process
1Systemd Service
1Scheduled Task/Job
1Cron
1