Overview

overview

8

Static

static

1

tankyard

ubuntu-24.04-amd64

8

Sharing

Copy URL Twitter E-mail

General

  • Target
    tankyard
  • Size 2.6MB
  • Sample261018-ejjyastvhy
  • SHA256 bf94ac7c60874814f412cc2f8187be6e5f3025adf450d1de077a8342267fbdb7
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
command_and_controldiscoveryexecutionlateral_movementlinuxpersistenceprivilege_escalationrootkit

Malware Config

Targets

    • Target
      tankyard
    • Size 2.6MB
    • SHA256 bf94ac7c60874814f412cc2f8187be6e5f3025adf450d1de077a8342267fbdb7
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    8/10
    command_and_controldiscoveryexecutionlateral_movementpersistenceprivilege_escalationrootkit

    • Outbound SSH connection to private host

      SSH is used for remote access. Internal traffic may indicate local host discovery or lateral movement.

      command_and_controllateral_movement

    • Loads a kernel module

      Loads a Linux kernel module, potentially to achieve persistence

      rootkit

    • Creates/modifies Cron job

      Cron allows running tasks on a schedule, and is commonly used for malware persistence.

      executionpersistenceprivilege_escalation
    behavioral1

MITRE ATT&CK Enterprise v16

Tasks