Analysis
- max time kernel
149s - max time network
129s - platform
ubuntu-18.04_amd64 - resource
ubuntu1804-amd64-20260513-en - resource tags
- submitted
02/10/2026, 23:20
General
- Target boss.elf
- Size 2.3MB
- Sample261002-3bkrmaxydy
- SHA256 681817158553beede00a5fd1225912d3e0740c6337853a62f65927e8f0f12010
Score
10/10
Malware Config
Signatures
- Family: Ladvix
Ladvix is a linux trojan and file infector first seen in 2022.
- ladvix 2 IoCs
Detects Ladvix payload
- Executes dropped EXE 19 IoCs
- Creates/modifies Cron job 1 TTPs 20 IoCs
Cron allows running tasks on a schedule, and is commonly used for malware persistence.
- Writes file to system bin folder 1 IoCs
- Reads runtime system information 20 IoCs
Reads data from /proc virtual filesystem.
- Writes file to tmp directory 20 IoCs
Malware often drops required files in the /tmp directory.
Processes
-
/tmp/boss.elf/tmp/boss.elf1⤵
- Executes dropped EXE
- Creates/modifies Cron job
- Writes file to system bin folder
- Reads runtime system information
- Writes file to tmp directory
-
/tmp/fileBVkcnV/tmp/boss.elf2⤵
- Executes dropped EXE
- Creates/modifies Cron job
- Reads runtime system information
- Writes file to tmp directory
-
/tmp/fileciYLeE/tmp/boss.elf3⤵
- Executes dropped EXE
- Creates/modifies Cron job
- Reads runtime system information
- Writes file to tmp directory
-
/tmp/fileCbKH4P/tmp/boss.elf4⤵
- Executes dropped EXE
- Creates/modifies Cron job
- Reads runtime system information
- Writes file to tmp directory
-
/tmp/filehiG170/tmp/boss.elf5⤵
- Executes dropped EXE
- Creates/modifies Cron job
- Reads runtime system information
- Writes file to tmp directory
-
/tmp/filexeZ53l/tmp/boss.elf6⤵
- Executes dropped EXE
- Creates/modifies Cron job
- Reads runtime system information
- Writes file to tmp directory
-
/tmp/filegN4Pa6/tmp/boss.elf7⤵
- Executes dropped EXE
- Creates/modifies Cron job
- Reads runtime system information
- Writes file to tmp directory
-
/tmp/fileqkfEg3/tmp/boss.elf8⤵
- Executes dropped EXE
- Creates/modifies Cron job
- Reads runtime system information
- Writes file to tmp directory
-
/tmp/filePFIL9Y/tmp/boss.elf9⤵
- Executes dropped EXE
- Creates/modifies Cron job
- Reads runtime system information
- Writes file to tmp directory
-
/tmp/fileD1qgzB/tmp/boss.elf10⤵
- Executes dropped EXE
- Creates/modifies Cron job
- Reads runtime system information
- Writes file to tmp directory
-
/tmp/filesxKzYu/tmp/boss.elf11⤵
- Executes dropped EXE
- Creates/modifies Cron job
- Reads runtime system information
- Writes file to tmp directory
-
/tmp/filewUFw1w/tmp/boss.elf12⤵
- Executes dropped EXE
- Creates/modifies Cron job
- Reads runtime system information
- Writes file to tmp directory
-
/tmp/filebnhENu/tmp/boss.elf13⤵
- Executes dropped EXE
- Creates/modifies Cron job
- Reads runtime system information
- Writes file to tmp directory
-
/tmp/file1Njsew/tmp/boss.elf14⤵
- Executes dropped EXE
- Creates/modifies Cron job
- Reads runtime system information
- Writes file to tmp directory
-
/tmp/file03Qjzj/tmp/boss.elf15⤵
- Executes dropped EXE
- Creates/modifies Cron job
- Reads runtime system information
- Writes file to tmp directory
-
/tmp/fileEer4lh/tmp/boss.elf16⤵
- Executes dropped EXE
- Creates/modifies Cron job
- Reads runtime system information
- Writes file to tmp directory
-
/tmp/filekcJAnd/tmp/boss.elf17⤵
- Executes dropped EXE
- Creates/modifies Cron job
- Reads runtime system information
- Writes file to tmp directory
-
/tmp/filePw0L6X/tmp/boss.elf18⤵
- Executes dropped EXE
- Creates/modifies Cron job
- Reads runtime system information
- Writes file to tmp directory
-
/tmp/filel6j2lZ/tmp/boss.elf19⤵
- Executes dropped EXE
- Creates/modifies Cron job
- Reads runtime system information
- Writes file to tmp directory
-
/tmp/fileLuIZtS/tmp/boss.elf20⤵
- Creates/modifies Cron job
- Reads runtime system information
- Writes file to tmp directory
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
0
fileBVkcnV
fileBVkcnV
fileY5XaPQ