General
- Target putita.x86_64.elf
- Size 55KB
- Sample260715-3tp43aby2z
- SHA256 d4a4f43c6efee41dbd3d761503bc5cc5ab7cf1c20a6065971edefe42408fc361
- MD5 dce8f1e3c36c972c8d2baa8488cb4202
- SHA1 e60c2018d7b273dda0ecac503fcf6b9ecd9758c4
- SHA512 f91183a2899c7b5dfe241419d9e999333c0fa3fc9490eeb9b7a93156a0f6a13de11421c8a5259319db9b2cf72547c34121112d6ab64e9529cbee18356f1dfb6e
- SSDEEP 768:EQEzbLA8R6vfMqeDZL88KoSN2LAIgghAmcTw9W5uz5Kwtd/syFPHOwqEJwndNK:v4R6HMqep85NMAInhL6wmudayFPHUAJ
- TLSH T1A043F1FE5D9256FBD67892B2AF4930F8B3D2255420520B77A445307EC8EE7641890FB2
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
putita.x86_64.elf
Resource
ubuntu1804-amd64-20260513-en
Malware Config
Targets
-
- Target putita.x86_64.elf
- Size 55KB
- SHA256 d4a4f43c6efee41dbd3d761503bc5cc5ab7cf1c20a6065971edefe42408fc361
- MD5 dce8f1e3c36c972c8d2baa8488cb4202
- SHA1 e60c2018d7b273dda0ecac503fcf6b9ecd9758c4
- SHA512 f91183a2899c7b5dfe241419d9e999333c0fa3fc9490eeb9b7a93156a0f6a13de11421c8a5259319db9b2cf72547c34121112d6ab64e9529cbee18356f1dfb6e
- SSDEEP 768:EQEzbLA8R6vfMqeDZL88KoSN2LAIgghAmcTw9W5uz5Kwtd/syFPHOwqEJwndNK:v4R6HMqep85NMAInhL6wmudayFPHUAJ
- TLSH T1A043F1FE5D9256FBD67892B2AF4930F8B3D2255420520B77A445307EC8EE7641890FB2
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Deletes itself
-
Creates/modifies Cron job
Cron allows running tasks on a schedule, and is commonly used for malware persistence.
-
Creates/modifies environment variables
Creating/modifying environment variables is a common persistence mechanism.
-
Modifies systemd
Adds/ modifies systemd service files. Likely to achieve persistence.
-
Modifies Bash startup script
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
4XDG Autostart Entries
1Boot or Logon Initialization Scripts
2RC Scripts
2Create or Modify System Process
1Systemd Service
1Event Triggered Execution
1Unix Shell Configuration Modification
1Hijack Execution Flow
1Path Interception by PATH Environment Variable
1Scheduled Task/Job
1Cron
1Privilege Escalation
Boot or Logon Autostart Execution
4XDG Autostart Entries
1Boot or Logon Initialization Scripts
2RC Scripts
2Create or Modify System Process
1Systemd Service
1Event Triggered Execution
1Unix Shell Configuration Modification
1Hijack Execution Flow
1Path Interception by PATH Environment Variable
1Scheduled Task/Job
1Cron
1