General
- Target x86_64.elf
- Size 182KB
- Sample261024-flx4dafy5x
- SHA256 044cebdeef95d9d4eb098e63499c06663de5d3e791a6c1553170847f41f80321
- MD5 0e66d0316e880da3d8267c737dfe6e31
- SHA1 f0d02f5fb076f2526a3b005664c10c2b215b011e
- SHA512 eda6f262c27c6373d88501ac5181284278aec19183e3a149cdeae059c03ccaf86fa5d86de49d3a29e20d634dd95b4dedabe244206400175d39b702b264cd0012
- SSDEEP 3072:28Edv0uOkcWpgG7cKnmkYAXqiOeeoIRPhhQvI1N5ckedLXlQ5AFgC+EeXLIt7ig9:Wd851WpUk7bB1qQvyNGQ5AFgDE7tOg9
- TLSH T134046B07BFE184BCC0A6D1344A1FE327AB7578896330766F279869A53E70B90376E354
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
x86_64.elf
Resource
ubuntu1804-amd64-20261019-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target x86_64.elf
- Size 182KB
- SHA256 044cebdeef95d9d4eb098e63499c06663de5d3e791a6c1553170847f41f80321
- MD5 0e66d0316e880da3d8267c737dfe6e31
- SHA1 f0d02f5fb076f2526a3b005664c10c2b215b011e
- SHA512 eda6f262c27c6373d88501ac5181284278aec19183e3a149cdeae059c03ccaf86fa5d86de49d3a29e20d634dd95b4dedabe244206400175d39b702b264cd0012
- SSDEEP 3072:28Edv0uOkcWpgG7cKnmkYAXqiOeeoIRPhhQvI1N5ckedLXlQ5AFgC+EeXLIt7ig9:Wd851WpUk7bB1qQvyNGQ5AFgDE7tOg9
- TLSH T134046B07BFE184BCC0A6D1344A1FE327AB7578896330766F279869A53E70B90376E354
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Deletes itself
-
Modifies Watchdog functionality
Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.
-
Creates/modifies Cron job
Cron allows running tasks on a schedule, and is commonly used for malware persistence.
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
2Boot or Logon Initialization Scripts
2RC Scripts
2Scheduled Task/Job
1Cron
1Privilege Escalation
Boot or Logon Autostart Execution
2Boot or Logon Initialization Scripts
2RC Scripts
2Scheduled Task/Job
1Cron
1