General
- Target mipsle.elf
- Size 5.3MB
- Sample260629-p298bady3s
- SHA256 77ed8fae517c78b0c00b626e69c1cd69686570a32041c22447978dad2ea03859
- MD5 0c00a30dbad22b5573cef980d73e50fd
- SHA1 05543dd6c38afc6cbffba53c381c949774e93c87
- SHA512 d24b47abd803d977bffa8f023ffc3712265144b7e4aa3f25f23d827ad600d1fcb73bf9af1f603a98780e77d28fddde2f53d98a3c7295fc174ae2b360d4e7d71b
- SSDEEP 24576:9Zd8DI+mz9x9sx5Rxprkglm1R1Q0UDAnG6Xi2NWdK7lHsI2SbbSKD0HpiKiEfdiF:exxYUUbKYJL6nEaj2buvKDLrIje
- TLSH T1F546FA15AC843BE7C02C9B7494EACE5623745D144AF24A362694FFACBC762387F4789C
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
mipsle.elf
Resource
debian12-mipsel-20260513-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target mipsle.elf
- Size 5.3MB
- SHA256 77ed8fae517c78b0c00b626e69c1cd69686570a32041c22447978dad2ea03859
- MD5 0c00a30dbad22b5573cef980d73e50fd
- SHA1 05543dd6c38afc6cbffba53c381c949774e93c87
- SHA512 d24b47abd803d977bffa8f023ffc3712265144b7e4aa3f25f23d827ad600d1fcb73bf9af1f603a98780e77d28fddde2f53d98a3c7295fc174ae2b360d4e7d71b
- SSDEEP 24576:9Zd8DI+mz9x9sx5Rxprkglm1R1Q0UDAnG6Xi2NWdK7lHsI2SbbSKD0HpiKiEfdiF:exxYUUbKYJL6nEaj2buvKDLrIje
- TLSH T1F546FA15AC843BE7C02C9B7494EACE5623745D144AF24A362694FFACBC762387F4789C
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Creates/modifies environment variables
Creating/modifying environment variables is a common persistence mechanism.
-
Write file to user bin folder
-
Modifies Bash startup script
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Event Triggered Execution
1Unix Shell Configuration Modification
1Hijack Execution Flow
1Path Interception by PATH Environment Variable
1Privilege Escalation
Boot or Logon Autostart Execution
1Event Triggered Execution
1Unix Shell Configuration Modification
1Hijack Execution Flow
1Path Interception by PATH Environment Variable
1