Resubmissions

12/08/2026, 04:33

260812-e6rlnayeqc10

11/08/2026, 11:57

260811-n4r9vasdmg7

11/08/2026, 11:57

260811-n4n77adp4v10

11/08/2026, 11:57

260811-n4kvrsdp3z7

11/08/2026, 05:48

260811-ghtr8ahj4s10

General

  • Target
    langflow_2026-08-05-react2shell-end_bin__dev_shm_5poLwV4.elf
  • Size 1.2MB
  • Sample260812-e6rlnayeqc
  • SHA256 deaeab9eb43fcf70d184c209e4bc1077ae6e7e2b182c1cbbc202dfdc053dc01c
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      langflow_2026-08-05-react2shell-end_bin__dev_shm_5poLwV4.elf
    • Size 1.2MB
    • SHA256 deaeab9eb43fcf70d184c209e4bc1077ae6e7e2b182c1cbbc202dfdc053dc01c
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Family: xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

    • XMRig Miner payload

    • Executes dropped EXE

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Checks hardware identifiers (DMI)

      Checks DMI information which indicate if the system is a virtual machine.

    • Enumerates running processes

      Discovers information about currently running processes on the system

    • Reads hardware information

      Accesses system info like serial numbers, manufacturer names etc.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v16

Tasks