General
- Target putita.arm6.elf
- Size 53KB
- Sample260717-at1atab141
- SHA256 3e24ad303b4fe1d1715656a959aa40aa036128f694fa059377bac2b247ba788c
- MD5 444b80f6b6d09a131a7b8d322a44fd8f
- SHA1 d1bd6941e225f4b1cad12729b03a736573dcf186
- SHA512 b119b57003e35e16417470f043e6f2f7676f1e7d2c0f5670b2b8d0b6050f41b32c12e2c5ca609a4889d5adff4eed34377104a3d3f47eea287026aa0fb35cb571
- SSDEEP 768:hmKBnBAqA+iXd1iqgAfSplB1cB0IEYIQh/2hH1uk2R2bRLdhgQffK2yGxQi3U03y:MBRZXd83A0lYIQh/2hH1u7RIrtK2jefd
- TLSH T12443F11029012BDBC5F41C3BB52E930896AB5BBE5A76767028306B7DBB9271B74B044F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
putita.arm6.elf
Resource
debian12-armhf-20260513-en
Malware Config
Targets
-
- Target putita.arm6.elf
- Size 53KB
- SHA256 3e24ad303b4fe1d1715656a959aa40aa036128f694fa059377bac2b247ba788c
- MD5 444b80f6b6d09a131a7b8d322a44fd8f
- SHA1 d1bd6941e225f4b1cad12729b03a736573dcf186
- SHA512 b119b57003e35e16417470f043e6f2f7676f1e7d2c0f5670b2b8d0b6050f41b32c12e2c5ca609a4889d5adff4eed34377104a3d3f47eea287026aa0fb35cb571
- SSDEEP 768:hmKBnBAqA+iXd1iqgAfSplB1cB0IEYIQh/2hH1uk2R2bRLdhgQffK2yGxQi3U03y:MBRZXd83A0lYIQh/2hH1u7RIrtK2jefd
- TLSH T12443F11029012BDBC5F41C3BB52E930896AB5BBE5A76767028306B7DBB9271B74B044F
- MD5 SHA1 SHA512 SSDEEP TLSH
Deletes itself
Creates/modifies Cron job
Cron allows running tasks on a schedule, and is commonly used for malware persistence.
Creates/modifies environment variables
Creating/modifying environment variables is a common persistence mechanism.
Modifies systemd
Adds/ modifies systemd service files. Likely to achieve persistence.
Modifies Bash startup script
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
4XDG Autostart Entries
1Boot or Logon Initialization Scripts
2RC Scripts
2Create or Modify System Process
1Systemd Service
1Event Triggered Execution
1Unix Shell Configuration Modification
1Hijack Execution Flow
1Path Interception by PATH Environment Variable
1Scheduled Task/Job
1Cron
1Privilege Escalation
Boot or Logon Autostart Execution
4XDG Autostart Entries
1Boot or Logon Initialization Scripts
2RC Scripts
2Create or Modify System Process
1Systemd Service
1Event Triggered Execution
1Unix Shell Configuration Modification
1Hijack Execution Flow
1Path Interception by PATH Environment Variable
1Scheduled Task/Job
1Cron
1