General
- Target mipsle
- Size 6.3MB
- Sample260730-w3ldxavdpf
- SHA256 11a367066e01e4e424487d8d6cf16b763fa81d8f70e029fbb28fb78304d01c97
- MD5 5182c562a50b4d2218b2b469c9418f96
- SHA1 26ca771bc26f2ed3357dc18444d9f780056d5ebe
- SHA512 d7017b2410915c9055f334c94f4a4ec143df84b823541729f15ad08466f37539c8620a0aba5b88fda05fb019032d6cf51ecca0c5c01e9171d810fc2a71fb8177
- SSDEEP 49152:QPYkxDd9xKkR1l+iR887p/Klk1aCw88888f8888888848688888k1SKk2EQJg+bb:mI+d458EV
- TLSH T12666F805AD842BF6C86D4B3484FACA9502B05E144AF1563A56A4FF6EBC772787F07C8C
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
mipsle
Resource
debian12-mipsel-20260513-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target mipsle
- Size 6.3MB
- SHA256 11a367066e01e4e424487d8d6cf16b763fa81d8f70e029fbb28fb78304d01c97
- MD5 5182c562a50b4d2218b2b469c9418f96
- SHA1 26ca771bc26f2ed3357dc18444d9f780056d5ebe
- SHA512 d7017b2410915c9055f334c94f4a4ec143df84b823541729f15ad08466f37539c8620a0aba5b88fda05fb019032d6cf51ecca0c5c01e9171d810fc2a71fb8177
- SSDEEP 49152:QPYkxDd9xKkR1l+iR887p/Klk1aCw88888f8888888848688888k1SKk2EQJg+bb:mI+d458EV
- TLSH T12666F805AD842BF6C86D4B3484FACA9502B05E144AF1563A56A4FF6EBC772787F07C8C
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Creates/modifies environment variables
Creating/modifying environment variables is a common persistence mechanism.
-
Write file to user bin folder
-
Modifies Bash startup script
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Event Triggered Execution
1Unix Shell Configuration Modification
1Hijack Execution Flow
1Path Interception by PATH Environment Variable
1Privilege Escalation
Boot or Logon Autostart Execution
1Event Triggered Execution
1Unix Shell Configuration Modification
1Hijack Execution Flow
1Path Interception by PATH Environment Variable
1