General
- Target x86.elf
- Size 244KB
- Sample261003-3ph5ysyhqa
- SHA256 b747d57c30eda7f8e64d6d282e2165658e22dd31efa08249275d2b1c62c8d60a
- MD5 c4b8c6475ebfb30b63d30a412787024e
- SHA1 f8941f663acc64d1b6dc5fcb3706b0d25d66d52a
- SHA512 ed28487d24c9b5052a97acc14f4a111a3d84ff9a4e641b7eb54b56afd48f9424d11406dc526c55ddca5c223000d8a018bf373c523b6911848131814685110c74
- SSDEEP 6144:ngi+b/efRMsTBeg8nxmFuqhsWByNCbvzk2aRTGK9u8:z+b/e+g8nxmFuqhD1hK0
- TLSH T12D345C41F5B2C6F0F35202B400AEE72F8F315915A4B7DF57EBD42922E463964222B779
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
x86.elf
Resource
ubuntu1804-amd64-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target x86.elf
- Size 244KB
- SHA256 b747d57c30eda7f8e64d6d282e2165658e22dd31efa08249275d2b1c62c8d60a
- MD5 c4b8c6475ebfb30b63d30a412787024e
- SHA1 f8941f663acc64d1b6dc5fcb3706b0d25d66d52a
- SHA512 ed28487d24c9b5052a97acc14f4a111a3d84ff9a4e641b7eb54b56afd48f9424d11406dc526c55ddca5c223000d8a018bf373c523b6911848131814685110c74
- SSDEEP 6144:ngi+b/efRMsTBeg8nxmFuqhsWByNCbvzk2aRTGK9u8:z+b/e+g8nxmFuqhD1hK0
- TLSH T12D345C41F5B2C6F0F35202B400AEE72F8F315915A4B7DF57EBD42922E463964222B779
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Modifies Watchdog functionality
Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.
-
Enumerates running processes
Discovers information about currently running processes on the system
-
Modifies systemd
Adds/ modifies systemd service files. Likely to achieve persistence.
-
Reads network interface configuration
Fetches information about one or more active network interfaces.
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1XDG Autostart Entries
1Create or Modify System Process
1Systemd Service
1Privilege Escalation
Boot or Logon Autostart Execution
1XDG Autostart Entries
1Create or Modify System Process
1Systemd Service
1Defense Evasion
Impair Defenses
1Virtualization/Sandbox Evasion
1System Checks
1