General
- Target nyx_bot_linux_amd64_hkdf.elf
- Size 6.1MB
- Sample261024-1p341set7m
- SHA256 5b6458c024a0333edf779148aa23e3072fb1508103001f4dd6477f5805e262f5
- MD5 54a94898e7a879f25b9bb1c79a0e34c2
- SHA1 3e7918af4258870a40037f900da02f29251d6db7
- SHA512 0bc0cc317be874e053cbe712fe79bd4fe2c2e865e1cdaa5ddf71e406e4d524cc2e7f9185290dedbcae76b0d19877e91af205dc617d2f1d29de7672a7da67deb7
- SSDEEP 49152:USzf574he3RhNulFzN7e3/wvMG/YQOLNNvUsgCVhYKgdAHeLG1vPo9VYvEPKOKDF:UURBeK3YLOZN4Cdgd8RoIsTEv
- TLSH T1B3565B07EC6555E9C1AEE6348A629263BA717C486B3163D33F50F3782F72BC06A79704
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
nyx_bot_linux_amd64_hkdf.elf
Resource
ubuntu1804-amd64-20261019-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target nyx_bot_linux_amd64_hkdf.elf
- Size 6.1MB
- SHA256 5b6458c024a0333edf779148aa23e3072fb1508103001f4dd6477f5805e262f5
- MD5 54a94898e7a879f25b9bb1c79a0e34c2
- SHA1 3e7918af4258870a40037f900da02f29251d6db7
- SHA512 0bc0cc317be874e053cbe712fe79bd4fe2c2e865e1cdaa5ddf71e406e4d524cc2e7f9185290dedbcae76b0d19877e91af205dc617d2f1d29de7672a7da67deb7
- SSDEEP 49152:USzf574he3RhNulFzN7e3/wvMG/YQOLNNvUsgCVhYKgdAHeLG1vPo9VYvEPKOKDF:UURBeK3YLOZN4Cdgd8RoIsTEv
- TLSH T1B3565B07EC6555E9C1AEE6348A629263BA717C486B3163D33F50F3782F72BC06A79704
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Creates/modifies Cron job
Cron allows running tasks on a schedule, and is commonly used for malware persistence.
-
Modifies systemd
Adds/ modifies systemd service files. Likely to achieve persistence.
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
4XDG Autostart Entries
2Boot or Logon Initialization Scripts
2RC Scripts
2Create or Modify System Process
1Systemd Service
1Scheduled Task/Job
1Cron
1