General
- Target langflow_2026-08-05-react2shell-end_bin__dev_shm_5poLwV4.elf
- Size 1.2MB
- Sample260812-e6rlnayeqc
- SHA256 deaeab9eb43fcf70d184c209e4bc1077ae6e7e2b182c1cbbc202dfdc053dc01c
- MD5 bdbc3dc63d8fd5528dc02ef49d0baf00
- SHA1 b77d49062f3a99a11d1fab07288873cf8106b6fe
- SHA512 c8afbfc14aa2d87a984a821e19abf770908209761df060211cb86caa2e41fe60dea157f7269064dacd567b7686c46ffdf4b02845603446cbd1dfba572fe5b7e8
- SSDEEP 24576:EKAUVu3YymoYaQ0CpJoEfe/U4SdDn93gLMZl/aRo3SHpdK1FgQvfE0gjjHP6g:fAUg3YymoBQ0CpJVm/ULJZNZIo3SJd2A
- TLSH T19B55330704B7C821A73033F6FAAC6209CEFC1E91526B6094356C4EF7656F1672EE391A
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Targets
-
- Target langflow_2026-08-05-react2shell-end_bin__dev_shm_5poLwV4.elf
- Size 1.2MB
- SHA256 deaeab9eb43fcf70d184c209e4bc1077ae6e7e2b182c1cbbc202dfdc053dc01c
- MD5 bdbc3dc63d8fd5528dc02ef49d0baf00
- SHA1 b77d49062f3a99a11d1fab07288873cf8106b6fe
- SHA512 c8afbfc14aa2d87a984a821e19abf770908209761df060211cb86caa2e41fe60dea157f7269064dacd567b7686c46ffdf4b02845603446cbd1dfba572fe5b7e8
- SSDEEP 24576:EKAUVu3YymoYaQ0CpJoEfe/U4SdDn93gLMZl/aRo3SHpdK1FgQvfE0gjjHP6g:fAUg3YymoBQ0CpJVm/ULJZNZIo3SJd2A
- TLSH T19B55330704B7C821A73033F6FAAC6209CEFC1E91526B6094356C4EF7656F1672EE391A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
XMRig Miner payload
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Checks hardware identifiers (DMI)
Checks DMI information which indicate if the system is a virtual machine.
-
Enumerates running processes
Discovers information about currently running processes on the system
-
Reads hardware information
Accesses system info like serial numbers, manufacturer names etc.