General
- Target arm6
- Size 5.7MB
- Sample260628-wwxtcsbx9l
- SHA256 527430cb7b27167ef60dfaf0cfa44d1cebab0466b331bc25e4b21072cccf72eb
- MD5 cec0e447717ef5c9ae25376994ba213d
- SHA1 72ca0f6a0aea4977124ee17e8c4088adfa500ec9
- SHA512 318f5cde93f24d354578a977e813e8758c0949579e789483f2e053978cc0070bdb200f03fa823a5f247d2ec3eeca2df90d25fc950e258bfd9d4acbefab15ee88
- SSDEEP 49152:S9wlnm+06GACytWjNFYdsd4d6cl16rn5Ee:+snmfACaWDid6e6lEe
- TLSH T110561897BDD24942C5E83A7BA9BD80C433630EB99B8712575D04FE383ABE1D90E39354
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
arm6
Resource
debian12-armhf-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target arm6
- Size 5.7MB
- SHA256 527430cb7b27167ef60dfaf0cfa44d1cebab0466b331bc25e4b21072cccf72eb
- MD5 cec0e447717ef5c9ae25376994ba213d
- SHA1 72ca0f6a0aea4977124ee17e8c4088adfa500ec9
- SHA512 318f5cde93f24d354578a977e813e8758c0949579e789483f2e053978cc0070bdb200f03fa823a5f247d2ec3eeca2df90d25fc950e258bfd9d4acbefab15ee88
- SSDEEP 49152:S9wlnm+06GACytWjNFYdsd4d6cl16rn5Ee:+snmfACaWDid6e6lEe
- TLSH T110561897BDD24942C5E83A7BA9BD80C433630EB99B8712575D04FE383ABE1D90E39354
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Creates/modifies environment variables
Creating/modifying environment variables is a common persistence mechanism.
-
Write file to user bin folder
-
Modifies Bash startup script
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Event Triggered Execution
1Unix Shell Configuration Modification
1Hijack Execution Flow
1Path Interception by PATH Environment Variable
1Privilege Escalation
Boot or Logon Autostart Execution
1Event Triggered Execution
1Unix Shell Configuration Modification
1Hijack Execution Flow
1Path Interception by PATH Environment Variable
1