General
- Target bot.x86_64
- Size 136KB
- Sample260824-w1bfxsef27
- SHA256 c426da4ab69f1b106b9bedbde91534d3e2e7213422126b838afac28d1a754243
- MD5 eb6efdcfa1212a802529675b78b0b863
- SHA1 b022185c60192e7f52eb180e32a26df228acdfa1
- SHA512 694de0ad7a3f7518f6f1f8e6d63f726beb5308616dcf5fab38c50c55a40ddeb825b84c8788110f7cb240c27dc0d98b21675853844c2861c50b5471316af1d6dd
- SSDEEP 3072:09/SOyAEvjt6qkWsuR6sjafoH0FdBugQyDueMEPG2CJa:09/SOyAEvjt6qkWsT18tlJa
- TLSH T132D34B07B5C180FDC4DAC1744B9BF53AED32B1A91238B26B27D4AE232E59E305F1DA54
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
Behavioral task
behavioral1
Sample
bot.x86_64
Resource
ubuntu1804-amd64-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target bot.x86_64
- Size 136KB
- SHA256 c426da4ab69f1b106b9bedbde91534d3e2e7213422126b838afac28d1a754243
- MD5 eb6efdcfa1212a802529675b78b0b863
- SHA1 b022185c60192e7f52eb180e32a26df228acdfa1
- SHA512 694de0ad7a3f7518f6f1f8e6d63f726beb5308616dcf5fab38c50c55a40ddeb825b84c8788110f7cb240c27dc0d98b21675853844c2861c50b5471316af1d6dd
- SSDEEP 3072:09/SOyAEvjt6qkWsuR6sjafoH0FdBugQyDueMEPG2CJa:09/SOyAEvjt6qkWsT18tlJa
- TLSH T132D34B07B5C180FDC4DAC1744B9BF53AED32B1A91238B26B27D4AE232E59E305F1DA54
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Deletes itself
-
Outbound SSH connection to public host
SSH is used for remote access. This may indicate SSH host discovery, encrypted C2 traffic, or data exfiltration.
-
Traces itself
Traces itself to prevent debugging attempts