General
- Target a6a4bb8a71e5e9f9599078cf4e9a3613990a8159d555d77cbb9058b999acb602
- Size 742KB
- Sample260716-etbpnsf19w
- SHA256 a6a4bb8a71e5e9f9599078cf4e9a3613990a8159d555d77cbb9058b999acb602
- MD5 140fc37ed7805109d9b822d7cd75c143
- SHA1 3ffd9562d09440d5ab3f80f97cdc41cab931e5cb
- SHA512 cc2533e1b8478a8e874f9fb52b9438509fedd74e23ea087112da7e75f7d23720f38206900eec395e85700b86fcc8f2d27773e9ca8463d9b02c9090bc065b221a
- SSDEEP 12288:eDW0Ta8z0icIMD8sKqiNPAn62rnx3Y9qPhC5pojPwozZ6O2wOjVUKfVqSU5t2ZDB:x0Ga0icIMD8sKq0An62rnx3Y9qPhC5pq
- TLSH T15FF44B06FF927FFBC45ECE30452EC34610DED89696D6522A31F8CA4CBB9D6190AD3588
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
a6a4bb8a71e5e9f9599078cf4e9a3613990a8159d555d77cbb9058b999acb602
Resource
debian12-mipsel-20260513-en
Malware Config
Targets
-
- Target a6a4bb8a71e5e9f9599078cf4e9a3613990a8159d555d77cbb9058b999acb602
- Size 742KB
- SHA256 a6a4bb8a71e5e9f9599078cf4e9a3613990a8159d555d77cbb9058b999acb602
- MD5 140fc37ed7805109d9b822d7cd75c143
- SHA1 3ffd9562d09440d5ab3f80f97cdc41cab931e5cb
- SHA512 cc2533e1b8478a8e874f9fb52b9438509fedd74e23ea087112da7e75f7d23720f38206900eec395e85700b86fcc8f2d27773e9ca8463d9b02c9090bc065b221a
- SSDEEP 12288:eDW0Ta8z0icIMD8sKqiNPAn62rnx3Y9qPhC5pojPwozZ6O2wOjVUKfVqSU5t2ZDB:x0Ga0icIMD8sKq0An62rnx3Y9qPhC5pq
- TLSH T15FF44B06FF927FFBC45ECE30452EC34610DED89696D6522A31F8CA4CBB9D6190AD3588
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Deletes itself
-
Executes dropped EXE
-
Creates/modifies Cron job
Cron allows running tasks on a schedule, and is commonly used for malware persistence.
-
Creates/modifies environment variables
Creating/modifying environment variables is a common persistence mechanism.
-
Enumerates running processes
Discovers information about currently running processes on the system
-
Modifies Bash startup script
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Event Triggered Execution
1Unix Shell Configuration Modification
1Hijack Execution Flow
1Path Interception by PATH Environment Variable
1Scheduled Task/Job
1Cron
1Privilege Escalation
Boot or Logon Autostart Execution
1Event Triggered Execution
1Unix Shell Configuration Modification
1Hijack Execution Flow
1Path Interception by PATH Environment Variable
1Scheduled Task/Job
1Cron
1