General
- Target nshkarm5.elf
- Size 105KB
- Sample260619-ns5e2afv3k
- SHA256 76226087850f97fe183df4ce812595287c502f07787476000ad485bd7f4b1028
- MD5 904f2aafbe91641c0439c715a3cbef0b
- SHA1 e136c521ca02862e7b88c65eebd547f91b42edf1
- SHA512 bc7c6d7496bab8b3ce8b980db1a647c6ea17999fa0822399b382fc68b530bb233c37fd7ff34ab674f795ee09e73e27630d706a0aa37128ddd3a2f557d1af1ea0
- SSDEEP 3072:oSQHtwe8TKh4uOM14+y8YqXfPxjPL5DKMXK+O7:oSYBuRP+yR0fVPNS+O7
- TLSH T160B30999F890CF61C6D1267AFB5E528C33130B78D3DA31068E159F3467EB95B0E3A912
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
nshkarm5.elf
Resource
debian12-armhf-20260127-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target nshkarm5.elf
- Size 105KB
- SHA256 76226087850f97fe183df4ce812595287c502f07787476000ad485bd7f4b1028
- MD5 904f2aafbe91641c0439c715a3cbef0b
- SHA1 e136c521ca02862e7b88c65eebd547f91b42edf1
- SHA512 bc7c6d7496bab8b3ce8b980db1a647c6ea17999fa0822399b382fc68b530bb233c37fd7ff34ab674f795ee09e73e27630d706a0aa37128ddd3a2f557d1af1ea0
- SSDEEP 3072:oSQHtwe8TKh4uOM14+y8YqXfPxjPL5DKMXK+O7:oSYBuRP+yR0fVPNS+O7
- TLSH T160B30999F890CF61C6D1267AFB5E528C33130B78D3DA31068E159F3467EB95B0E3A912
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Deletes itself
-
Renames itself
-
Creates/modifies Cron job
Cron allows running tasks on a schedule, and is commonly used for malware persistence.
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Boot or Logon Initialization Scripts
1RC Scripts
1Scheduled Task/Job
1Cron
1