General
- Target x86.elf
- Size 113KB
- Sample260804-gh7dbascmb
- SHA256 87f4f402ee39b5c1c0a3e90671f14bbf247a70ffffdfa799edd9d63da6a41290
- MD5 31f478ede7cf723b1314df2a09ef06b1
- SHA1 3f87a4bff48d1a43019c9fef8f3e9e0b63f033d4
- SHA512 2348f72cf31ff805ed716ab08879f91dd557ab0b265cfc889b8dc24be4d9fd3f856cd934da4cca25015ec929540407183f5b054941a503e80ddd8f9484a4d0e6
- SSDEEP 3072:ySyB5neo9uK9f9iI4Rnm+hamq2l6vTsk/TEoo6YYYYYYYYY6YYYYYYYYY6YimD:pgD0K98NR67v4oRYYYYYYYYY6YYYYYYQ
- TLSH T1F5B36B82FA93D1F0E4534670002BE76B8F35ED258525DE4AEB683E71ECB1B02495B76C
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
x86.elf
Resource
ubuntu1804-amd64-20260513-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target x86.elf
- Size 113KB
- SHA256 87f4f402ee39b5c1c0a3e90671f14bbf247a70ffffdfa799edd9d63da6a41290
- MD5 31f478ede7cf723b1314df2a09ef06b1
- SHA1 3f87a4bff48d1a43019c9fef8f3e9e0b63f033d4
- SHA512 2348f72cf31ff805ed716ab08879f91dd557ab0b265cfc889b8dc24be4d9fd3f856cd934da4cca25015ec929540407183f5b054941a503e80ddd8f9484a4d0e6
- SSDEEP 3072:ySyB5neo9uK9f9iI4Rnm+hamq2l6vTsk/TEoo6YYYYYYYYY6YYYYYYYYY6YimD:pgD0K98NR67v4oRYYYYYYYYY6YYYYYYQ
- TLSH T1F5B36B82FA93D1F0E4534670002BE76B8F35ED258525DE4AEB683E71ECB1B02495B76C
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Creates/modifies Cron job
Cron allows running tasks on a schedule, and is commonly used for malware persistence.
-
Modifies systemd
Adds/ modifies systemd service files. Likely to achieve persistence.
-
Write file to user bin folder
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
2XDG Autostart Entries
1Boot or Logon Initialization Scripts
1RC Scripts
1Create or Modify System Process
1Systemd Service
1Scheduled Task/Job
1Cron
1