General
- Target 885eedb41d5008249366afbedb69879cb793555ed0594b9bfa7f61f0cecfb0c6
- Size 607KB
- Sample260716-es6tesf181
- SHA256 885eedb41d5008249366afbedb69879cb793555ed0594b9bfa7f61f0cecfb0c6
- MD5 c80dbf256ba0af4f2928016ff955e2d9
- SHA1 26ab59324fb1544b9111740b93e84e5ce64a71e4
- SHA512 312b4d0d26aa4b1ce52b9cee8eaad9db214cdca76eea3c39815b69b3a3c4baf91ca5acea990981857d75d7d212ac4cf34763fbb45502bee7964e2e9cb88a8ce9
- SSDEEP 12288:dYyO7QNVUgJT5bHZmcGpORHyVFRgpISG/Y9iFo1ZS8eHe6u:dYN7QNVUs5HXRSfXw9Uo1ZSTHe6
- TLSH T1CAD44A56F880CF62C5D1157AF65F82A8731347B9C3DBB20699189B383BD782B4F3A641
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
885eedb41d5008249366afbedb69879cb793555ed0594b9bfa7f61f0cecfb0c6
Resource
debian12-armhf-20260127-en
Malware Config
Targets
-
- Target 885eedb41d5008249366afbedb69879cb793555ed0594b9bfa7f61f0cecfb0c6
- Size 607KB
- SHA256 885eedb41d5008249366afbedb69879cb793555ed0594b9bfa7f61f0cecfb0c6
- MD5 c80dbf256ba0af4f2928016ff955e2d9
- SHA1 26ab59324fb1544b9111740b93e84e5ce64a71e4
- SHA512 312b4d0d26aa4b1ce52b9cee8eaad9db214cdca76eea3c39815b69b3a3c4baf91ca5acea990981857d75d7d212ac4cf34763fbb45502bee7964e2e9cb88a8ce9
- SSDEEP 12288:dYyO7QNVUgJT5bHZmcGpORHyVFRgpISG/Y9iFo1ZS8eHe6u:dYN7QNVUs5HXRSfXw9Uo1ZSTHe6
- TLSH T1CAD44A56F880CF62C5D1157AF65F82A8731347B9C3DBB20699189B383BD782B4F3A641
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Deletes itself
-
Executes dropped EXE
-
Creates/modifies Cron job
Cron allows running tasks on a schedule, and is commonly used for malware persistence.
-
Creates/modifies environment variables
Creating/modifying environment variables is a common persistence mechanism.
-
Enumerates running processes
Discovers information about currently running processes on the system
-
Modifies Bash startup script
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Event Triggered Execution
1Unix Shell Configuration Modification
1Hijack Execution Flow
1Path Interception by PATH Environment Variable
1Scheduled Task/Job
1Cron
1Privilege Escalation
Boot or Logon Autostart Execution
1Event Triggered Execution
1Unix Shell Configuration Modification
1Hijack Execution Flow
1Path Interception by PATH Environment Variable
1Scheduled Task/Job
1Cron
1