General
- Target arm5
- Size 5.6MB
- Sample260730-w3ftesvdng
- SHA256 d2c51478b5abf90a4bc9fbdaeefcd3937e12995f1b2df73cdf9d7cc9cd8d0f4f
- MD5 f7075fdce9082c9dbadeed87b70a1e73
- SHA1 a01b3dc91695bde30de2f5c71a8df091940b9061
- SHA512 f3803ff89fe4ce4461ad6e99f68058ea453b5dd48156d0f1c2ea4bb3836aa80c7949763b105acb312e4dd5bc099328cc2bc68de1072f74e67a6b45ccbb8267b2
- SSDEEP 24576:KCZ9tXQBM9SF3bxtQdVkj9qNeV95/bWXhpx2gVmKhDkzzgS9diZ+U+1MDgJQMOED:Kdx7I/xL7F0hT8XnPjXWVpVlWc5Eg
- TLSH T173561897B9D25942C4E43A7BB8BD80C433630EB99B8712665D14FE383EBE1D90E35358
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
arm5
Resource
debian12-armhf-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target arm5
- Size 5.6MB
- SHA256 d2c51478b5abf90a4bc9fbdaeefcd3937e12995f1b2df73cdf9d7cc9cd8d0f4f
- MD5 f7075fdce9082c9dbadeed87b70a1e73
- SHA1 a01b3dc91695bde30de2f5c71a8df091940b9061
- SHA512 f3803ff89fe4ce4461ad6e99f68058ea453b5dd48156d0f1c2ea4bb3836aa80c7949763b105acb312e4dd5bc099328cc2bc68de1072f74e67a6b45ccbb8267b2
- SSDEEP 24576:KCZ9tXQBM9SF3bxtQdVkj9qNeV95/bWXhpx2gVmKhDkzzgS9diZ+U+1MDgJQMOED:Kdx7I/xL7F0hT8XnPjXWVpVlWc5Eg
- TLSH T173561897B9D25942C4E43A7BB8BD80C433630EB99B8712665D14FE383EBE1D90E35358
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Creates/modifies environment variables
Creating/modifying environment variables is a common persistence mechanism.
-
Write file to user bin folder
-
Modifies Bash startup script
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Event Triggered Execution
1Unix Shell Configuration Modification
1Hijack Execution Flow
1Path Interception by PATH Environment Variable
1Privilege Escalation
Boot or Logon Autostart Execution
1Event Triggered Execution
1Unix Shell Configuration Modification
1Hijack Execution Flow
1Path Interception by PATH Environment Variable
1