General
- Target nyx_bot_linux_amd64_hkdf.elf
- Size 6.1MB
- Sample261022-w2vaesbb44
- SHA256 0a5d7cded8fb6c6c8281f23c194e40666ad5620e7a75a005af9f1dd81fe4899c
- MD5 dbb1d714e85c11175ca3cc88cf10b7e3
- SHA1 22333775183134bc7a690609f4aef8143b848f66
- SHA512 0737a5a8060512d83ba286b164d55e706b520768d9c8e0b46055b2f4c0435f163568159439b0ff8c0abcd38161684cb688b6070a6a38da61a7b6ada2beac8a82
- SSDEEP 49152:TSLPhAwBjvEhdc+aGLtzaHgOfMGQQAOLK/OtsxV4VLkf/MKLqMTBoxVYFtPKOKDZ:TM5S4UOHgzOW/H+mfUwFIvEEP
- TLSH T16F565B07EC6555E9C1ADE6348A629263BAB17C486B3163D33F50F3782F72BC06A79704
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
nyx_bot_linux_amd64_hkdf.elf
Resource
ubuntu1804-amd64-20261019-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target nyx_bot_linux_amd64_hkdf.elf
- Size 6.1MB
- SHA256 0a5d7cded8fb6c6c8281f23c194e40666ad5620e7a75a005af9f1dd81fe4899c
- MD5 dbb1d714e85c11175ca3cc88cf10b7e3
- SHA1 22333775183134bc7a690609f4aef8143b848f66
- SHA512 0737a5a8060512d83ba286b164d55e706b520768d9c8e0b46055b2f4c0435f163568159439b0ff8c0abcd38161684cb688b6070a6a38da61a7b6ada2beac8a82
- SSDEEP 49152:TSLPhAwBjvEhdc+aGLtzaHgOfMGQQAOLK/OtsxV4VLkf/MKLqMTBoxVYFtPKOKDZ:TM5S4UOHgzOW/H+mfUwFIvEEP
- TLSH T16F565B07EC6555E9C1ADE6348A629263BAB17C486B3163D33F50F3782F72BC06A79704
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Creates/modifies Cron job
Cron allows running tasks on a schedule, and is commonly used for malware persistence.
-
Modifies systemd
Adds/ modifies systemd service files. Likely to achieve persistence.
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
4XDG Autostart Entries
2Boot or Logon Initialization Scripts
2RC Scripts
2Create or Modify System Process
1Systemd Service
1Scheduled Task/Job
1Cron
1