General
- Target bot.x86
- Size 87KB
- Sample260815-ap3v5sck71
- SHA256 565c2198267c0fe3cab574243a426f8ff824a4499522148d5958d53b1cf22fc4
- MD5 42d3d30acbe8a8c9bf5397fd11ecef1d
- SHA1 b3192decf56c5bbb994e6563c598a5fae52e13f0
- SHA512 b06620cd0ca7c8b77d713f6e6f561fe6c8174f95904604ce959871b61899754af8e572fcf869b53152a294d2f0abcbacfc4aa43f8cb12f4f9b43e8000397c44d
- SSDEEP 1536:W/QCZaxGdvts3FVVPhE9YxPu++g7bQUIKqI4FrS4LSK:WYCZa8dvm3nVPhAYxP5RbiKfUmDK
- TLSH T103937CC4F683C4F2E84305B1507BE7379B32F1B9101AFA43D3A99A72DC91551EA1AB9C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
Behavioral task
behavioral1
Sample
bot.x86
Resource
ubuntu1804-amd64-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target bot.x86
- Size 87KB
- SHA256 565c2198267c0fe3cab574243a426f8ff824a4499522148d5958d53b1cf22fc4
- MD5 42d3d30acbe8a8c9bf5397fd11ecef1d
- SHA1 b3192decf56c5bbb994e6563c598a5fae52e13f0
- SHA512 b06620cd0ca7c8b77d713f6e6f561fe6c8174f95904604ce959871b61899754af8e572fcf869b53152a294d2f0abcbacfc4aa43f8cb12f4f9b43e8000397c44d
- SSDEEP 1536:W/QCZaxGdvts3FVVPhE9YxPu++g7bQUIKqI4FrS4LSK:WYCZa8dvm3nVPhAYxP5RbiKfUmDK
- TLSH T103937CC4F683C4F2E84305B1507BE7379B32F1B9101AFA43D3A99A72DC91551EA1AB9C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Deletes itself
-
Outbound SSH connection to public host
SSH is used for remote access. This may indicate SSH host discovery, encrypted C2 traffic, or data exfiltration.
-
Traces itself
Traces itself to prevent debugging attempts