General
- Target x86_64.elf
- Size 5.7MB
- Sample261004-h8391sysht
- SHA256 ff3abb3ff46c15c8c11cd60b3e446c46eb6548c79b7a1e58013804a451c73504
- MD5 96c368637ff5c1d24f76eb33e79c2d83
- SHA1 8a8a02133e4e136373185c7b5a49980855682e81
- SHA512 76a3b1fa1442c9841d3827f7410358fe3b55fcee00038297a3aada2eff3802834e5e3318ac3cc4e29f4b376fd549012995440a7546f88b53023e828bb0207e9c
- SSDEEP 49152:SVskTpUb2p4ULn/SmUPOpnL6Tb4dou0qPIyjlSePK4f7iGcgHhNxewaLAHKQKDKT:SVXOqOEeutIyBL3iGdKAkuCEj
- TLSH T17C564A03FCA555E6C0EEE23489629213BB717C495B3123D72BA0F7282F76BD06AB5750
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
x86_64.elf
Resource
ubuntu1804-amd64-20260513-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target x86_64.elf
- Size 5.7MB
- SHA256 ff3abb3ff46c15c8c11cd60b3e446c46eb6548c79b7a1e58013804a451c73504
- MD5 96c368637ff5c1d24f76eb33e79c2d83
- SHA1 8a8a02133e4e136373185c7b5a49980855682e81
- SHA512 76a3b1fa1442c9841d3827f7410358fe3b55fcee00038297a3aada2eff3802834e5e3318ac3cc4e29f4b376fd549012995440a7546f88b53023e828bb0207e9c
- SSDEEP 49152:SVskTpUb2p4ULn/SmUPOpnL6Tb4dou0qPIyjlSePK4f7iGcgHhNxewaLAHKQKDKT:SVXOqOEeutIyBL3iGdKAkuCEj
- TLSH T17C564A03FCA555E6C0EEE23489629213BB717C495B3123D72BA0F7282F76BD06AB5750
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Creates/modifies Cron job
Cron allows running tasks on a schedule, and is commonly used for malware persistence.
-
Modifies systemd
Adds/ modifies systemd service files. Likely to achieve persistence.
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
2XDG Autostart Entries
1Boot or Logon Initialization Scripts
1RC Scripts
1Create or Modify System Process
1Systemd Service
1Scheduled Task/Job
1Cron
1