General
- Target killbotx.x86
- Size 101KB
- Sample260807-wwggda1dpe
- SHA256 4135a4f52eb88adb74fe31baaa9b13c89b17a743ccf8dc2dae2f7ee5e2c634e5
- MD5 22bee70986e4966a5e009facebcccf71
- SHA1 cf9ead45a7574faaf6aa9c4e19872b955c3f3dba
- SHA512 6c87328acffa82705ea8a13e9a18a608baf7303228497c9a6687545d65bd2959558ee758ccba3bfafec1c72c32f68cbfdc5af9a7161d2da9076c58f3f0fb968d
- SSDEEP 3072:IZFJEggNaoTcad8yzmzhEL9Z9Wa1YTDGNg:IZ/gNavEL5/oGm
- TLSH T18CA36C40FA83D1F1F85705700167E75A8B34ED398024DB4AEB593E35ECB5B068A6B7AC
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
killbotx.x86
Resource
ubuntu1804-amd64-20260513-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target killbotx.x86
- Size 101KB
- SHA256 4135a4f52eb88adb74fe31baaa9b13c89b17a743ccf8dc2dae2f7ee5e2c634e5
- MD5 22bee70986e4966a5e009facebcccf71
- SHA1 cf9ead45a7574faaf6aa9c4e19872b955c3f3dba
- SHA512 6c87328acffa82705ea8a13e9a18a608baf7303228497c9a6687545d65bd2959558ee758ccba3bfafec1c72c32f68cbfdc5af9a7161d2da9076c58f3f0fb968d
- SSDEEP 3072:IZFJEggNaoTcad8yzmzhEL9Z9Wa1YTDGNg:IZ/gNavEL5/oGm
- TLSH T18CA36C40FA83D1F1F85705700167E75A8B34ED398024DB4AEB593E35ECB5B068A6B7AC
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Creates/modifies Cron job
Cron allows running tasks on a schedule, and is commonly used for malware persistence.
-
Modifies systemd
Adds/ modifies systemd service files. Likely to achieve persistence.
-
Write file to user bin folder
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
2XDG Autostart Entries
1Boot or Logon Initialization Scripts
1RC Scripts
1Create or Modify System Process
1Systemd Service
1Scheduled Task/Job
1Cron
1