General
- Target oldboss
- Size 2.3MB
- Sample260808-al32qswcrc
- SHA256 42bc441401f33d6cc02c90c13b020257da58fe735c87c59846cd3e4ca679752a
- MD5 e1c0677fb68325da1e09f9818696f0be
- SHA1 4effc1c06b0cf6ca4605dfcd90fed66023a78a80
- SHA512 e7dd48ccc6e1aaf29d4a38e5547f6736a2f20280cf9ca77a92c6cc2e67f25de78cbeeb55f23c41596b44fe80d383f4f73862e75da37309671b348424d3e8b6b8
- SSDEEP 49152:nv+UKkhbC5+b30qnW9ZlUIyoVWPR+tWTl3Ad7M+y:n27ViRX3AZMP
- TLSH T14BB57C077CE119AAC0AA93328DB651A2BBB1FC490B7123D72E50B3782F727D45E35794
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
oldboss
Resource
ubuntu1804-amd64-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target oldboss
- Size 2.3MB
- SHA256 42bc441401f33d6cc02c90c13b020257da58fe735c87c59846cd3e4ca679752a
- MD5 e1c0677fb68325da1e09f9818696f0be
- SHA1 4effc1c06b0cf6ca4605dfcd90fed66023a78a80
- SHA512 e7dd48ccc6e1aaf29d4a38e5547f6736a2f20280cf9ca77a92c6cc2e67f25de78cbeeb55f23c41596b44fe80d383f4f73862e75da37309671b348424d3e8b6b8
- SSDEEP 49152:nv+UKkhbC5+b30qnW9ZlUIyoVWPR+tWTl3Ad7M+y:n27ViRX3AZMP
- TLSH T14BB57C077CE119AAC0AA93328DB651A2BBB1FC490B7123D72E50B3782F727D45E35794
- MD5 SHA1 SHA512 SSDEEP TLSH
-
File and Directory Permissions Modification
Adversaries may modify file or directory permissions to evade defenses.
-
Enumerates running processes
Discovers information about currently running processes on the system
-
Modifies systemd
Adds/ modifies systemd service files. Likely to achieve persistence.
-
Write file to user bin folder
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1XDG Autostart Entries
1Create or Modify System Process
1Systemd Service
1Privilege Escalation
Boot or Logon Autostart Execution
1XDG Autostart Entries
1Create or Modify System Process
1Systemd Service
1