General
- Target nyx_bot_linux_amd64_hkdf.elf
- Size 6.5MB
- Sample261027-yl39hat18k
- SHA256 8fdf86dc457c554f6637b51e51700eb39d5533c72390ce6e12b513105cd8b3ff
- MD5 f826489a7b7f4f42cd07ee58b1fb3efd
- SHA1 c013a432928adf83208799b35e2f177c6c4c8785
- SHA512 7c8643ae1a91d411c98b58a86502aaccee277e77a8a84524fad437200e4e384f4dbebabe1cf5a6a4c30f156089ac89723a0e14b31b29ba6baca0f7cda08fd6d1
- SSDEEP 49152:9Cy7t28C48Ohjpv0yZ7lgQrI5xHgPCQjq5Sot7KN+3gyQmMFAr5GMdhKlK1KciuR:9CK270P8bJQH2ENavjDEy
- TLSH T1C3664947EC9525E9C0AEA1318A729253BF727C491B3123D72B90F6283F77BD06A79740
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
nyx_bot_linux_amd64_hkdf.elf
Resource
ubuntu1804-amd64-20261019-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target nyx_bot_linux_amd64_hkdf.elf
- Size 6.5MB
- SHA256 8fdf86dc457c554f6637b51e51700eb39d5533c72390ce6e12b513105cd8b3ff
- MD5 f826489a7b7f4f42cd07ee58b1fb3efd
- SHA1 c013a432928adf83208799b35e2f177c6c4c8785
- SHA512 7c8643ae1a91d411c98b58a86502aaccee277e77a8a84524fad437200e4e384f4dbebabe1cf5a6a4c30f156089ac89723a0e14b31b29ba6baca0f7cda08fd6d1
- SSDEEP 49152:9Cy7t28C48Ohjpv0yZ7lgQrI5xHgPCQjq5Sot7KN+3gyQmMFAr5GMdhKlK1KciuR:9CK270P8bJQH2ENavjDEy
- TLSH T1C3664947EC9525E9C0AEA1318A729253BF727C491B3123D72B90F6283F77BD06A79740
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Creates/modifies Cron job
Cron allows running tasks on a schedule, and is commonly used for malware persistence.
-
Modifies systemd
Adds/ modifies systemd service files. Likely to achieve persistence.
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
4XDG Autostart Entries
2Boot or Logon Initialization Scripts
2RC Scripts
2Create or Modify System Process
1Systemd Service
1Scheduled Task/Job
1Cron
1