General
- Target new.txt.elf
- Size 6.2MB
- Sample261024-nykb2seh53
- SHA256 188f7cc16345ab783644473f21015400b42c345c63b089a1c176a0136efebf90
- MD5 caac013b37a95904fedce2bea9ec6d2d
- SHA1 0bea83ded1608e284d793ac20b41968fde3d9f1f
- SHA512 6bffc75f240a33a8c71a0aa4082df7df07ac91e85f4fe2e127eb19f284f8c6272179e1f091e0db272c78993fb1e3f0b7fc63302f775c075f4c6c4857646949b2
- SSDEEP 98304:vUB3H3Ng3uFkoG2I4dky07hVS19aWHyE6l:v43Ng3PoG2IXVS19RfW
- TLSH T11A662712FECB14F6E903193104BBA27F27315D058B24EB87EB407E29FD7B6A55932219
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
new.txt.elf
Resource
ubuntu1804-amd64-20261019-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target new.txt.elf
- Size 6.2MB
- SHA256 188f7cc16345ab783644473f21015400b42c345c63b089a1c176a0136efebf90
- MD5 caac013b37a95904fedce2bea9ec6d2d
- SHA1 0bea83ded1608e284d793ac20b41968fde3d9f1f
- SHA512 6bffc75f240a33a8c71a0aa4082df7df07ac91e85f4fe2e127eb19f284f8c6272179e1f091e0db272c78993fb1e3f0b7fc63302f775c075f4c6c4857646949b2
- SSDEEP 98304:vUB3H3Ng3uFkoG2I4dky07hVS19aWHyE6l:v43Ng3PoG2IXVS19RfW
- TLSH T11A662712FECB14F6E903193104BBA27F27315D058B24EB87EB407E29FD7B6A55932219
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Creates/modifies Cron job
Cron allows running tasks on a schedule, and is commonly used for malware persistence.
-
Write file to user bin folder
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Boot or Logon Initialization Scripts
1RC Scripts
1Scheduled Task/Job
1Cron
1