We're sorry but any.run reports doesn't work properly without JavaScript enabled. Please enable it to continue.
Analysis result
Behavior activities
Threats
Find similar analyses in TI Lookup
Analysis date (UTC):
5 April 2025, 08:30
Analysis environment:
Ubuntu 22.04.2
RotaJakiro.malware
MD5:
65F5B913B7FA46D907E797D1F202817D
SHA1:
E40103D547FD9FF45529F160A537ABB3BD7EBBD4
SHA256:
D1CDEEA8A081397632C0522476DA2122F93C71CB14A36AD4E8D4351B3D65FD6D
Analysis result
Threat level:
Malicious activity
Full analysis:
Analysis RotaJakiro.malware (MD5: 65F5B913B7FA46D907E797D1F202817D) Malicious activity - Interactive analysis ANY.RUN
Behavior activities
MALICIOUS
No malicious indicators.
SUSPICIOUS
Reads profile file
RotaJakiro.malware.elf (PID: 40665)
Executes commands using command-line interpreter
sudo (PID: 40663)
Modifies file or directory owner
sudo (PID: 40659)
Writes to Systemd service files (likely for persistence achievement)
sudo (PID: 40663)
systemd (PID: 40678)
Reads passwd file
RotaJakiro.malware.elf (PID: 40665)
INFO
No info indicators.
Threats
No threats detected