General
- Target i386.elf
- Size 5.3MB
- Sample260907-gjw9qsfa44
- SHA256 55b147e674c585d19f1d311d14ea34a539b900c31f78f187d5c043eadf4fb1c3
- MD5 c11344cff613b5a1a3871c881c43e846
- SHA1 9fb065e921999ca1f2f02de984b76f436315cf12
- SHA512 316b8df293ef7b53f17f87c5a5bbb2772b2fa636730f8f61bf99625eec92af742b4bf588828c58fe6072ac16d086a50bbbc7c8602b541034d21afc123ae3ba69
- SSDEEP 49152:v5lgp0GJZA2jaVgSpEwWTAo37uzv+b3TqstlswWgexQBc31aDKvmUJ5Ep:Qp0G/p5yEwrz+TrtmgexQBRBUfEp
- TLSH T1D2462851FECB14F6E9031A3104BBA26F63315C058F28DBD7EA547F2AF9776A10932219
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
i386.elf
Resource
ubuntu1804-amd64-20260513-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target i386.elf
- Size 5.3MB
- SHA256 55b147e674c585d19f1d311d14ea34a539b900c31f78f187d5c043eadf4fb1c3
- MD5 c11344cff613b5a1a3871c881c43e846
- SHA1 9fb065e921999ca1f2f02de984b76f436315cf12
- SHA512 316b8df293ef7b53f17f87c5a5bbb2772b2fa636730f8f61bf99625eec92af742b4bf588828c58fe6072ac16d086a50bbbc7c8602b541034d21afc123ae3ba69
- SSDEEP 49152:v5lgp0GJZA2jaVgSpEwWTAo37uzv+b3TqstlswWgexQBc31aDKvmUJ5Ep:Qp0G/p5yEwrz+TrtmgexQBRBUfEp
- TLSH T1D2462851FECB14F6E9031A3104BBA26F63315C058F28DBD7EA547F2AF9776A10932219
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Creates/modifies environment variables
Creating/modifying environment variables is a common persistence mechanism.
-
Write file to user bin folder
-
Modifies Bash startup script
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Event Triggered Execution
1Unix Shell Configuration Modification
1Hijack Execution Flow
1Path Interception by PATH Environment Variable
1Privilege Escalation
Boot or Logon Autostart Execution
1Event Triggered Execution
1Unix Shell Configuration Modification
1Hijack Execution Flow
1Path Interception by PATH Environment Variable
1