General
- Target new.txt.elf
- Size 112KB
- Sample260929-wljtra1ang
- SHA256 c0e14bdae4eeff4a5cefb7977ce59c2be49cea2f8ba2be5be7c3c7861485ac54
- MD5 c71d1ceb4f04779586dc73cc5bab24b7
- SHA1 2a2ac65760238b9028ea72e9ac58e8c57d394bab
- SHA512 94aa6286852c23063cf607ede5d3a16e0832eeff195d7d35a8f8dcebc9ff5cad23d34fa5c7c81b9e54090ecf7a936252a74d42939955b50e6cfb4149dd0162b0
- SSDEEP 1536:+VrNxG8giUnvzkgJaWdOFkRCfni290e7vmrAcWA+WdObWrzxe/T7vqfFzLRrl+3p:+p68giUws+knSlGldL8/T7vqfvAzt
- TLSH T1EFB32801F742EBB8E68308F5087AD764FF354D1B023088EBF7D166B4B8A1A9158E755E
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
new.txt.elf
Resource
ubuntu1804-amd64-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target new.txt.elf
- Size 112KB
- SHA256 c0e14bdae4eeff4a5cefb7977ce59c2be49cea2f8ba2be5be7c3c7861485ac54
- MD5 c71d1ceb4f04779586dc73cc5bab24b7
- SHA1 2a2ac65760238b9028ea72e9ac58e8c57d394bab
- SHA512 94aa6286852c23063cf607ede5d3a16e0832eeff195d7d35a8f8dcebc9ff5cad23d34fa5c7c81b9e54090ecf7a936252a74d42939955b50e6cfb4149dd0162b0
- SSDEEP 1536:+VrNxG8giUnvzkgJaWdOFkRCfni290e7vmrAcWA+WdObWrzxe/T7vqfFzLRrl+3p:+p68giUws+knSlGldL8/T7vqfvAzt
- TLSH T1EFB32801F742EBB8E68308F5087AD764FF354D1B023088EBF7D166B4B8A1A9158E755E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Creates/modifies Cron job
Cron allows running tasks on a schedule, and is commonly used for malware persistence.
-
Write file to user bin folder
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Boot or Logon Initialization Scripts
1RC Scripts
1Scheduled Task/Job
1Cron
1