General
- Target amd64
- Size 5.0MB
- Sample260905-phf55a1vdz
- SHA256 1e3eb765015fd335cfdcb0ddd020565690b5a2f15a2a62406d750bcb21b6d77b
- MD5 fa83031a6964319843f67713fdd56b80
- SHA1 42cb9b12c6287225772e040bf8b151c8935bc7e8
- SHA512 dabc00e17bd465ad81907d036438b0c0844b7e327635de481eef5e1b34d65810f77996c34b1243f1f2fd1cbfff6cf6bccc2ec02dfc79b136537341b644c23f88
- SSDEEP 49152:IJPpsCDvmLCyk8NbrRpeGICkKhhbnRL5EWOiGr9Y/zA95xwEhO:CpsAvmLCc/e6RXEBrPvxJ
- TLSH T1E7364A57FCA545E9C0AED1348A629252BA717C485B3123D72F90F7383F72BD0AA7A344
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
amd64
Resource
ubuntu1804-amd64-20260513-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target amd64
- Size 5.0MB
- SHA256 1e3eb765015fd335cfdcb0ddd020565690b5a2f15a2a62406d750bcb21b6d77b
- MD5 fa83031a6964319843f67713fdd56b80
- SHA1 42cb9b12c6287225772e040bf8b151c8935bc7e8
- SHA512 dabc00e17bd465ad81907d036438b0c0844b7e327635de481eef5e1b34d65810f77996c34b1243f1f2fd1cbfff6cf6bccc2ec02dfc79b136537341b644c23f88
- SSDEEP 49152:IJPpsCDvmLCyk8NbrRpeGICkKhhbnRL5EWOiGr9Y/zA95xwEhO:CpsAvmLCc/e6RXEBrPvxJ
- TLSH T1E7364A57FCA545E9C0AED1348A629252BA717C485B3123D72F90F7383F72BD0AA7A344
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Modifies Watchdog functionality
Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.
-
Creates/modifies environment variables
Creating/modifying environment variables is a common persistence mechanism.
-
Modifies Bash startup script
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
2Boot or Logon Initialization Scripts
1RC Scripts
1Event Triggered Execution
1Unix Shell Configuration Modification
1Hijack Execution Flow
1Path Interception by PATH Environment Variable
1Privilege Escalation
Boot or Logon Autostart Execution
2Boot or Logon Initialization Scripts
1RC Scripts
1Event Triggered Execution
1Unix Shell Configuration Modification
1Hijack Execution Flow
1Path Interception by PATH Environment Variable
1