General
- Target putita.arm7.elf
- Size 52KB
- Sample260717-xe1pcsa17m
- SHA256 bc658eaff9e085c43280052034ea30014908e54946c8f9b3a820cb97fe4c9430
- MD5 477bd804d4b82da1e2d9d5bc41e0a8ce
- SHA1 b3b2e9e37158f904f2f65b7c7f9f4e57f6306604
- SHA512 f211c53982a1346eb182d13e218ff11f4c20eb59cdb4e65042c22d596c22e73ba878a00188a0a1a818d3333d1437a4166c638680cb6f731cd56d13df1bc01ccf
- SSDEEP 768:WbsmrDRxYO62x6WMWGoEhGJIRATUzC3TsmiqUTpJN1nUmS4mKDamo3U03wfZo:ism/RlXMSE8KRATFTWqKJcR4mKWmFfZo
- TLSH T10F3302D2CC493494C12199B8DC6EA354F54BD479B1EEB50BD158FDD8EBD362A38F800A
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
putita.arm7.elf
Resource
debian12-armhf-20260513-en
Malware Config
Targets
-
- Target putita.arm7.elf
- Size 52KB
- SHA256 bc658eaff9e085c43280052034ea30014908e54946c8f9b3a820cb97fe4c9430
- MD5 477bd804d4b82da1e2d9d5bc41e0a8ce
- SHA1 b3b2e9e37158f904f2f65b7c7f9f4e57f6306604
- SHA512 f211c53982a1346eb182d13e218ff11f4c20eb59cdb4e65042c22d596c22e73ba878a00188a0a1a818d3333d1437a4166c638680cb6f731cd56d13df1bc01ccf
- SSDEEP 768:WbsmrDRxYO62x6WMWGoEhGJIRATUzC3TsmiqUTpJN1nUmS4mKDamo3U03wfZo:ism/RlXMSE8KRATFTWqKJcR4mKWmFfZo
- TLSH T10F3302D2CC493494C12199B8DC6EA354F54BD479B1EEB50BD158FDD8EBD362A38F800A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Deletes itself
-
Creates/modifies Cron job
Cron allows running tasks on a schedule, and is commonly used for malware persistence.
-
Creates/modifies environment variables
Creating/modifying environment variables is a common persistence mechanism.
-
Modifies systemd
Adds/ modifies systemd service files. Likely to achieve persistence.
-
Modifies Bash startup script
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
4XDG Autostart Entries
1Boot or Logon Initialization Scripts
2RC Scripts
2Create or Modify System Process
1Systemd Service
1Event Triggered Execution
1Unix Shell Configuration Modification
1Hijack Execution Flow
1Path Interception by PATH Environment Variable
1Scheduled Task/Job
1Cron
1Privilege Escalation
Boot or Logon Autostart Execution
4XDG Autostart Entries
1Boot or Logon Initialization Scripts
2RC Scripts
2Create or Modify System Process
1Systemd Service
1Event Triggered Execution
1Unix Shell Configuration Modification
1Hijack Execution Flow
1Path Interception by PATH Environment Variable
1Scheduled Task/Job
1Cron
1