General
- Target nklx86.elf
- Size 79KB
- Sample260122-cl2vsabs2c
- SHA256 ee0e5a1b65764548191bc6ee533c577c17986cb40cf71475bba491608a33fb6d
- MD5 c2a1a239dac8d4e27df4d78cf0ccfb97
- SHA1 bb1c3445dfa9784d013336f07e77ddfcd9d4b53d
- SHA512 3306d0023942c7f8c35c711bb3dc31186762688dfa25f7627947b61d1a7924ded8ff7dddb78b6b83a1ca451cd0376bdc7b157740dd356074bc94dedd07791e7a
- SSDEEP 1536:ZErJFbgrUaPNBc58oitJ8sciWZx2zCp89P455q56QimPrXl7bRl/Tpi:s/8YoLc59wmZYCK9w55Q1T1nJ
- MD5 SHA1 SHA512 SSDEEP
Static task
static1
Behavioral task
behavioral1
Sample
nklx86.elf
Resource
ubuntu1804-amd64-20251231-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target nklx86.elf
- Size 79KB
- SHA256 ee0e5a1b65764548191bc6ee533c577c17986cb40cf71475bba491608a33fb6d
- MD5 c2a1a239dac8d4e27df4d78cf0ccfb97
- SHA1 bb1c3445dfa9784d013336f07e77ddfcd9d4b53d
- SHA512 3306d0023942c7f8c35c711bb3dc31186762688dfa25f7627947b61d1a7924ded8ff7dddb78b6b83a1ca451cd0376bdc7b157740dd356074bc94dedd07791e7a
- SSDEEP 1536:ZErJFbgrUaPNBc58oitJ8sciWZx2zCp89P455q56QimPrXl7bRl/Tpi:s/8YoLc59wmZYCK9w55Q1T1nJ
- MD5 SHA1 SHA512 SSDEEP
Score9/10-
Contacts a large (29324) amount of remote hosts
This may indicate a network scan to discover remotely running services.
-
Creates a large amount of network flows
This may indicate a network scan to discover remotely running services.
-
Renames itself