General
- Target arm4.elf
- Size 125KB
- Sample260804-he2jbshn2x
- SHA256 4dd104330e996a429f67c9d0a6c9dbeb72ecbc18efc6cec3b437ddb67c20b7a2
- MD5 2a4347ac93a2fe7de53d356b751e27f3
- SHA1 fce17e8b652374f33137b1170b0e481e90395606
- SHA512 df0774515391050aa1052a4e0ba035c3df82a54313968189cdc5afe74bbeb812a06fc20fd2bc3b974cf4a550efb1a2684f691a47e501fb9fdaed95ee6c4d176d
- SSDEEP 3072:bIVclikPTDA6hLVb8qcVINOQ1W1ek62vQ07XK5w:bIFkPTDbzoqcVIoQ1SQ0e5w
- TLSH T18EC3F765F850CB61C6C52A7AFB4E428D33231B78D3E93102CD14AF3467EA95A4F3B946
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
arm4.elf
Resource
debian12-armhf-20260513-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target arm4.elf
- Size 125KB
- SHA256 4dd104330e996a429f67c9d0a6c9dbeb72ecbc18efc6cec3b437ddb67c20b7a2
- MD5 2a4347ac93a2fe7de53d356b751e27f3
- SHA1 fce17e8b652374f33137b1170b0e481e90395606
- SHA512 df0774515391050aa1052a4e0ba035c3df82a54313968189cdc5afe74bbeb812a06fc20fd2bc3b974cf4a550efb1a2684f691a47e501fb9fdaed95ee6c4d176d
- SSDEEP 3072:bIVclikPTDA6hLVb8qcVINOQ1W1ek62vQ07XK5w:bIFkPTDbzoqcVIoQ1SQ0e5w
- TLSH T18EC3F765F850CB61C6C52A7AFB4E428D33231B78D3E93102CD14AF3467EA95A4F3B946
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Creates/modifies Cron job
Cron allows running tasks on a schedule, and is commonly used for malware persistence.
-
Modifies systemd
Adds/ modifies systemd service files. Likely to achieve persistence.
-
Write file to user bin folder
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
2XDG Autostart Entries
1Boot or Logon Initialization Scripts
1RC Scripts
1Create or Modify System Process
1Systemd Service
1Scheduled Task/Job
1Cron
1