General
- Target ecc15d0dd293c0c880d381016f9bca1324d615ba6bbff4f7413f512f6972dc59.elf
- Size 92KB
- Sample260823-yc2djsan4s
- SHA256 ecc15d0dd293c0c880d381016f9bca1324d615ba6bbff4f7413f512f6972dc59
- MD5 0df4f8f23c91eb9efad89c960bd8fa45
- SHA1 87911ba25e597773e7975dc1d4c3961815f24aed
- SHA512 7444a19fbcec67c8943a283ea65c1f451940735735885a466a583772f8f42232676b37b177f16356c0a6cf45b22c13b29fa8927f6bb0a567199b87832309f855
- SSDEEP 1536:olMTr4X9Q6/H3wNINV3RCgrZRLJIxAUELXsvXcAJ8vfH4ToDS2oSoHK11c7Vtr8e:AAr4XLHgNINVhVZRL6ELgcAEeIS2nkz/
- TLSH T1E49312B082EC020470DF95BA5E9634EB8B68F502A058BBDB1DF2653177393553923F76
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
ecc15d0dd293c0c880d381016f9bca1324d615ba6bbff4f7413f512f6972dc59.elf
Resource
ubuntu1804-amd64-20260513-en
Malware Config
Targets
-
- Target ecc15d0dd293c0c880d381016f9bca1324d615ba6bbff4f7413f512f6972dc59.elf
- Size 92KB
- SHA256 ecc15d0dd293c0c880d381016f9bca1324d615ba6bbff4f7413f512f6972dc59
- MD5 0df4f8f23c91eb9efad89c960bd8fa45
- SHA1 87911ba25e597773e7975dc1d4c3961815f24aed
- SHA512 7444a19fbcec67c8943a283ea65c1f451940735735885a466a583772f8f42232676b37b177f16356c0a6cf45b22c13b29fa8927f6bb0a567199b87832309f855
- SSDEEP 1536:olMTr4X9Q6/H3wNINV3RCgrZRLJIxAUELXsvXcAJ8vfH4ToDS2oSoHK11c7Vtr8e:AAr4XLHgNINVhVZRL6ELgcAEeIS2nkz/
- TLSH T1E49312B082EC020470DF95BA5E9634EB8B68F502A058BBDB1DF2653177393553923F76
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Deletes itself
-
Creates/modifies Cron job
Cron allows running tasks on a schedule, and is commonly used for malware persistence.
-
Creates/modifies environment variables
Creating/modifying environment variables is a common persistence mechanism.
-
Modifies systemd
Adds/ modifies systemd service files. Likely to achieve persistence.
-
Modifies Bash startup script
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
4XDG Autostart Entries
1Boot or Logon Initialization Scripts
2RC Scripts
2Create or Modify System Process
1Systemd Service
1Event Triggered Execution
1Unix Shell Configuration Modification
1Hijack Execution Flow
1Path Interception by PATH Environment Variable
1Scheduled Task/Job
1Cron
1Privilege Escalation
Boot or Logon Autostart Execution
4XDG Autostart Entries
1Boot or Logon Initialization Scripts
2RC Scripts
2Create or Modify System Process
1Systemd Service
1Event Triggered Execution
1Unix Shell Configuration Modification
1Hijack Execution Flow
1Path Interception by PATH Environment Variable
1Scheduled Task/Job
1Cron
1