General
- Target amd64
- Size 5.5MB
- Sample260907-pmb2zagg95
- SHA256 36e0a44d13c7409d7743b644b4802a2e112f0324cdd54a9e30a26b14f608478c
- MD5 1ea803b517a789b5175efb05691cdcbe
- SHA1 ae56bc3f1940b015e0caa93198727faf6a59c589
- SHA512 476b8b0bd8484c0e09895857e33a234bbdecec4ddd01415848f8e8b78f7036838df6b92f60c46a9eca9cc1c07f4a2519671fe917852f0187adbaa47dae0cbe94
- SSDEEP 49152:C8408uR+7bhLQ8wi9SyHr9y56gLEl7PQFOIbj0Mnaa+zgNEZvbucFPKOKDKWLkSe:CFIjkHrECbQwIPaPzNILBEE0
- TLSH T19A465C47EC9555E5C1E9E2308A729253BA71BC496B3123D32F60F3382F76BD06AB9740
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
amd64
Resource
ubuntu1804-amd64-20260513-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target amd64
- Size 5.5MB
- SHA256 36e0a44d13c7409d7743b644b4802a2e112f0324cdd54a9e30a26b14f608478c
- MD5 1ea803b517a789b5175efb05691cdcbe
- SHA1 ae56bc3f1940b015e0caa93198727faf6a59c589
- SHA512 476b8b0bd8484c0e09895857e33a234bbdecec4ddd01415848f8e8b78f7036838df6b92f60c46a9eca9cc1c07f4a2519671fe917852f0187adbaa47dae0cbe94
- SSDEEP 49152:C8408uR+7bhLQ8wi9SyHr9y56gLEl7PQFOIbj0Mnaa+zgNEZvbucFPKOKDKWLkSe:CFIjkHrECbQwIPaPzNILBEE0
- TLSH T19A465C47EC9555E5C1E9E2308A729253BA71BC496B3123D32F60F3382F76BD06AB9740
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Creates/modifies environment variables
Creating/modifying environment variables is a common persistence mechanism.
-
Write file to user bin folder
-
Modifies Bash startup script
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Event Triggered Execution
1Unix Shell Configuration Modification
1Hijack Execution Flow
1Path Interception by PATH Environment Variable
1Privilege Escalation
Boot or Logon Autostart Execution
1Event Triggered Execution
1Unix Shell Configuration Modification
1Hijack Execution Flow
1Path Interception by PATH Environment Variable
1