General
- Target killbotx.x86.elf
- Size 113KB
- Sample260804-qe95gabd25
- SHA256 73229bbc4a24cf0315595b156a52aee04496d152445a9be25e45dc2f38d6d8bc
- MD5 d5025e16c07445d048aba2ddae378165
- SHA1 d2cf3f3e8d6fd01a50d1bf9771b478ee7f7c328a
- SHA512 3dc62eefc4ad05ed6e2b81bcffed4702f2f40248f2ae97e3ef9e25af558f974ff208b74feaea7ad1fc941bc3457fc69cf2f9136201f8f1afab48dfb2b914f0a3
- SSDEEP 3072:XQUz2tuI9yVE/VvLjkYaC1sM4zTHRTxm2v:AtII9oK94H3mU
- TLSH T1F0B35B82F693D1F0F4534270002BE76B8F35ED258125DE4AEB693A71ECB1B424A5B76C
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
killbotx.x86.elf
Resource
ubuntu1804-amd64-20260513-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target killbotx.x86.elf
- Size 113KB
- SHA256 73229bbc4a24cf0315595b156a52aee04496d152445a9be25e45dc2f38d6d8bc
- MD5 d5025e16c07445d048aba2ddae378165
- SHA1 d2cf3f3e8d6fd01a50d1bf9771b478ee7f7c328a
- SHA512 3dc62eefc4ad05ed6e2b81bcffed4702f2f40248f2ae97e3ef9e25af558f974ff208b74feaea7ad1fc941bc3457fc69cf2f9136201f8f1afab48dfb2b914f0a3
- SSDEEP 3072:XQUz2tuI9yVE/VvLjkYaC1sM4zTHRTxm2v:AtII9oK94H3mU
- TLSH T1F0B35B82F693D1F0F4534270002BE76B8F35ED258125DE4AEB693A71ECB1B424A5B76C
- MD5 SHA1 SHA512 SSDEEP TLSH
Creates/modifies Cron job
Cron allows running tasks on a schedule, and is commonly used for malware persistence.
Modifies systemd
Adds/ modifies systemd service files. Likely to achieve persistence.
Write file to user bin folder
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
2XDG Autostart Entries
1Boot or Logon Initialization Scripts
1RC Scripts
1Create or Modify System Process
1Systemd Service
1Scheduled Task/Job
1Cron
1