General
- Target bdf891511702284916c8479c60d36a4fe0f81c6f8f1fc6382800b316fc6d76ac
- Size 623KB
- Sample260716-es57wsf18z
- SHA256 bdf891511702284916c8479c60d36a4fe0f81c6f8f1fc6382800b316fc6d76ac
- MD5 4c2e303da0b541b16f7924aae62d2b5e
- SHA1 fa8010603682e7174c5ae5923aded655b60adc49
- SHA512 fd897a792fd2771719d194e2a112b16fc0e157951358b3a996cf7083c560418c9570ed2915b4f622da383ce97fe9b4d2498e15c4fcf821c398939d1d20ad1039
- SSDEEP 12288:FEAunQNkwppXXxmvz/UpO6in2WRzDgpISGlziO1ZS8eHe6u:eDnQNkwDXigdi2oZIO1ZSTHe6
- TLSH T1F5D43B56F8808F62C5D1257AF65F82AC331747B9C3DBB20695289B343FD792B4B36680
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
bdf891511702284916c8479c60d36a4fe0f81c6f8f1fc6382800b316fc6d76ac
Resource
debian12-armhf-20260513-en
Malware Config
Targets
-
- Target bdf891511702284916c8479c60d36a4fe0f81c6f8f1fc6382800b316fc6d76ac
- Size 623KB
- SHA256 bdf891511702284916c8479c60d36a4fe0f81c6f8f1fc6382800b316fc6d76ac
- MD5 4c2e303da0b541b16f7924aae62d2b5e
- SHA1 fa8010603682e7174c5ae5923aded655b60adc49
- SHA512 fd897a792fd2771719d194e2a112b16fc0e157951358b3a996cf7083c560418c9570ed2915b4f622da383ce97fe9b4d2498e15c4fcf821c398939d1d20ad1039
- SSDEEP 12288:FEAunQNkwppXXxmvz/UpO6in2WRzDgpISGlziO1ZS8eHe6u:eDnQNkwDXigdi2oZIO1ZSTHe6
- TLSH T1F5D43B56F8808F62C5D1257AF65F82AC331747B9C3DBB20695289B343FD792B4B36680
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Deletes itself
-
Executes dropped EXE
-
Creates/modifies Cron job
Cron allows running tasks on a schedule, and is commonly used for malware persistence.
-
Creates/modifies environment variables
Creating/modifying environment variables is a common persistence mechanism.
-
Enumerates running processes
Discovers information about currently running processes on the system
-
Modifies Bash startup script
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Event Triggered Execution
1Unix Shell Configuration Modification
1Hijack Execution Flow
1Path Interception by PATH Environment Variable
1Scheduled Task/Job
1Cron
1Privilege Escalation
Boot or Logon Autostart Execution
1Event Triggered Execution
1Unix Shell Configuration Modification
1Hijack Execution Flow
1Path Interception by PATH Environment Variable
1Scheduled Task/Job
1Cron
1