General
- Target x86_64.elf
- Size 185KB
- Sample261024-q2lemavtbt
- SHA256 4dc34b240a972474b036fa7813f1db6331c84909ad2d2eb345239e2f8919bf1f
- MD5 c76c31df2ffdaf64d16a59885a204567
- SHA1 bfb067b48e63aead321e1af4f82a0f21735ae2a1
- SHA512 c33a557b523e4989c1fccaf0c8b1e66e8444c78e1d9aeb7827d48e8f81213ec0e24e00fab1db4f239201c97e82130fd6206ec478b698d5325bc0224d96ca3996
- SSDEEP 3072:vNfdE056Tgzq4mcKo7PY8dei7YEY2zLciHRtamjXPTxWzrNSvpPV6gmdreO77IpZ:Zdf5AgztPJHcfSHRtx/4zEPV6gkrz7Un
- TLSH T181046C07BFE184BCC066D1389A1FE327A77578892330766F279869A43E35B90376E354
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
x86_64.elf
Resource
ubuntu1804-amd64-20261019-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target x86_64.elf
- Size 185KB
- SHA256 4dc34b240a972474b036fa7813f1db6331c84909ad2d2eb345239e2f8919bf1f
- MD5 c76c31df2ffdaf64d16a59885a204567
- SHA1 bfb067b48e63aead321e1af4f82a0f21735ae2a1
- SHA512 c33a557b523e4989c1fccaf0c8b1e66e8444c78e1d9aeb7827d48e8f81213ec0e24e00fab1db4f239201c97e82130fd6206ec478b698d5325bc0224d96ca3996
- SSDEEP 3072:vNfdE056Tgzq4mcKo7PY8dei7YEY2zLciHRtamjXPTxWzrNSvpPV6gmdreO77IpZ:Zdf5AgztPJHcfSHRtx/4zEPV6gkrz7Un
- TLSH T181046C07BFE184BCC066D1389A1FE327A77578892330766F279869A43E35B90376E354
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Deletes itself
-
Modifies Watchdog functionality
Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.
-
Creates/modifies Cron job
Cron allows running tasks on a schedule, and is commonly used for malware persistence.
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
2Boot or Logon Initialization Scripts
2RC Scripts
2Scheduled Task/Job
1Cron
1Privilege Escalation
Boot or Logon Autostart Execution
2Boot or Logon Initialization Scripts
2RC Scripts
2Scheduled Task/Job
1Cron
1