General

  • Target
    bot.x86_64.elf
  • Size 903KB
  • Sample260819-t3db7agb96
  • SHA256 b90bed9e263890355772c8bc2feeff76509bca7a596f6afcc9221f5b104eea8e
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      bot.x86_64.elf
    • Size 903KB
    • SHA256 b90bed9e263890355772c8bc2feeff76509bca7a596f6afcc9221f5b104eea8e
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Deletes itself

    • Traces itself

      Traces itself to prevent debugging attempts

    • Checks hardware identifiers (DMI)

      Checks DMI information which indicate if the system is a virtual machine.

    • Creates/modifies Cron job

      Cron allows running tasks on a schedule, and is commonly used for malware persistence.

    • Modifies init.d

      Adds/modifies system service, likely for persistence.

MITRE ATT&CK Enterprise v16

Tasks