General
- Target mipsle.elf
- Size 6.4MB
- Sample260510-twprmsbx2t
- SHA256 05376681181f11433cb64b2e6257b44c87e3c7fdf608bfb746484d011e4f60b5
- MD5 f51805c65ba2974edea2584ef1ea062f
- SHA1 4d12faa860f1eefa46b6ca8b8202375fc05355bc
- SHA512 d54a68aec8066c14a506f5c0777dcdedc8be0920eb6519e5d68255337fc0a3c9e5121ff820f3513106549d430627b9ef9ef0b287bc9bdd12c7fdaddb2954999f
- SSDEEP 49152:CnC+rBZkUsZRSFq903OVzgXq8Jz0JvC5EO:+saAOu4EO
- TLSH T140660A09AD842BE6C86D4F3444EECA9512B45D144AF24A3616B4FFADBC772387F4788C
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
mipsle.elf
Resource
debian12-mipsel-20260126-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target mipsle.elf
- Size 6.4MB
- SHA256 05376681181f11433cb64b2e6257b44c87e3c7fdf608bfb746484d011e4f60b5
- MD5 f51805c65ba2974edea2584ef1ea062f
- SHA1 4d12faa860f1eefa46b6ca8b8202375fc05355bc
- SHA512 d54a68aec8066c14a506f5c0777dcdedc8be0920eb6519e5d68255337fc0a3c9e5121ff820f3513106549d430627b9ef9ef0b287bc9bdd12c7fdaddb2954999f
- SSDEEP 49152:CnC+rBZkUsZRSFq903OVzgXq8Jz0JvC5EO:+saAOu4EO
- TLSH T140660A09AD842BE6C86D4F3444EECA9512B45D144AF24A3616B4FFADBC772387F4788C
- MD5 SHA1 SHA512 SSDEEP TLSH
Creates/modifies environment variables
Creating/modifying environment variables is a common persistence mechanism.
Write file to user bin folder
Modifies Bash startup script
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Event Triggered Execution
1Unix Shell Configuration Modification
1Hijack Execution Flow
1Path Interception by PATH Environment Variable
1Privilege Escalation
Boot or Logon Autostart Execution
1Event Triggered Execution
1Unix Shell Configuration Modification
1Hijack Execution Flow
1Path Interception by PATH Environment Variable
1