General
- Target x86_64.elf
- Size 191KB
- Sample260825-s5eglabp5z
- SHA256 d0d8228650efdb2e76ad216a1252c44699783599bcb76a2a337f746b8a3ffdc5
- MD5 6d0abc119ed7c44b1ddf18a149233473
- SHA1 db4ba899c71854e9811bdc2d3ebbfa6adbe406a8
- SHA512 5254477d65c0d5657d4522cb28fcbae210d0a2d5404d61a76105faf8211947546bfa7eec2ee2a8493d1b800890e51aedf08b07bfb458502d227232aa228c45d5
- SSDEEP 3072:mzsimzQmXoAXmzOlqgOJd82m+VKgCHvsaL2UZ8973u1EssMZc/T03ImIys61X1hO:mzsYEbkPVbaDS7UEssMOgh5oN
- TLSH T173145C1378E1D0FEC997C1388B9F901A9932F41B1124B21E774DBE652F4EE30A7AE594
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
x86_64.elf
Resource
ubuntu1804-amd64-20260513-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target x86_64.elf
- Size 191KB
- SHA256 d0d8228650efdb2e76ad216a1252c44699783599bcb76a2a337f746b8a3ffdc5
- MD5 6d0abc119ed7c44b1ddf18a149233473
- SHA1 db4ba899c71854e9811bdc2d3ebbfa6adbe406a8
- SHA512 5254477d65c0d5657d4522cb28fcbae210d0a2d5404d61a76105faf8211947546bfa7eec2ee2a8493d1b800890e51aedf08b07bfb458502d227232aa228c45d5
- SSDEEP 3072:mzsimzQmXoAXmzOlqgOJd82m+VKgCHvsaL2UZ8973u1EssMZc/T03ImIys61X1hO:mzsYEbkPVbaDS7UEssMOgh5oN
- TLSH T173145C1378E1D0FEC997C1388B9F901A9932F41B1124B21E774DBE652F4EE30A7AE594
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Deletes itself
-
Creates/modifies Cron job
Cron allows running tasks on a schedule, and is commonly used for malware persistence.
-
Enumerates running processes
Discovers information about currently running processes on the system
-
Reads list of loaded kernel modules
Reads the list of currently loaded kernel modules, possibly to detect virtual environments.
MITRE ATT&CK Enterprise v16
Execution
Command and Scripting Interpreter
1Unix Shell
1Scheduled Task/Job
1Cron
1Persistence
Boot or Logon Autostart Execution
1Boot or Logon Initialization Scripts
1RC Scripts
1Scheduled Task/Job
1Cron
1Privilege Escalation
Boot or Logon Autostart Execution
1Boot or Logon Initialization Scripts
1RC Scripts
1Scheduled Task/Job
1Cron
1