General
- Target 0dd5d379001fe6a689e401523a63a82f1548136d674a1fe2f18eec128cd552a2.elf
- Size 61KB
- Sample260819-akrbjsbl9y
- SHA256 0dd5d379001fe6a689e401523a63a82f1548136d674a1fe2f18eec128cd552a2
- MD5 133f07b704b05cf4adf0fb49d0ed978a
- SHA1 0001dbd841e88e4656043a7c0208effeb41227c9
- SHA512 6ec22d078addfc6da498fc22ca3ac3cb1475091f44db33bd37cd6e046a4c77a8227360285c92c452c454a1f8866bcf06297e050b170eb9e8e5c5266f4e9deb01
- SSDEEP 1536:actRMl+XD7oWkKLVZlmF8nUyw+CYhx2YTx03xnouy8DMd:FYl+z7oWkAvlmF4wRYhx2cKxoutDMd
- TLSH T15A53F256AE666EACE09C5C733CE93C57605CEF05E4414BDB6548A437A836E78CA483C3
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
0dd5d379001fe6a689e401523a63a82f1548136d674a1fe2f18eec128cd552a2.elf
Resource
ubuntu1804-amd64-20260513-en
Malware Config
Targets
-
- Target 0dd5d379001fe6a689e401523a63a82f1548136d674a1fe2f18eec128cd552a2.elf
- Size 61KB
- SHA256 0dd5d379001fe6a689e401523a63a82f1548136d674a1fe2f18eec128cd552a2
- MD5 133f07b704b05cf4adf0fb49d0ed978a
- SHA1 0001dbd841e88e4656043a7c0208effeb41227c9
- SHA512 6ec22d078addfc6da498fc22ca3ac3cb1475091f44db33bd37cd6e046a4c77a8227360285c92c452c454a1f8866bcf06297e050b170eb9e8e5c5266f4e9deb01
- SSDEEP 1536:actRMl+XD7oWkKLVZlmF8nUyw+CYhx2YTx03xnouy8DMd:FYl+z7oWkAvlmF4wRYhx2cKxoutDMd
- TLSH T15A53F256AE666EACE09C5C733CE93C57605CEF05E4414BDB6548A437A836E78CA483C3
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Deletes itself
-
Creates/modifies Cron job
Cron allows running tasks on a schedule, and is commonly used for malware persistence.
-
Creates/modifies environment variables
Creating/modifying environment variables is a common persistence mechanism.
-
Modifies systemd
Adds/ modifies systemd service files. Likely to achieve persistence.
-
Modifies Bash startup script
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
4XDG Autostart Entries
1Boot or Logon Initialization Scripts
2RC Scripts
2Create or Modify System Process
1Systemd Service
1Event Triggered Execution
1Unix Shell Configuration Modification
1Hijack Execution Flow
1Path Interception by PATH Environment Variable
1Scheduled Task/Job
1Cron
1Privilege Escalation
Boot or Logon Autostart Execution
4XDG Autostart Entries
1Boot or Logon Initialization Scripts
2RC Scripts
2Create or Modify System Process
1Systemd Service
1Event Triggered Execution
1Unix Shell Configuration Modification
1Hijack Execution Flow
1Path Interception by PATH Environment Variable
1Scheduled Task/Job
1Cron
1