General
- Target putita.arm6.elf
- Size 125KB
- Sample260805-gt6adsef33
- SHA256 533c98bb5892e4d1bc65e861bd5c9cc979401da825e26bbee312273103cd7094
- MD5 e990c4e7e1ed84582d69ac251a15f192
- SHA1 d14dd15498d0a823610adf83caabb072a4ee66ec
- SHA512 1db709012ce32b0bb24b4823b7b5d652711cc28b6b7fa7e0446c6426e3ba7037d7283da03284fce324515a98e8b4c1ceab70351e1d9f34fc75789495234aba53
- SSDEEP 3072:R74ICbzNB9v9/KUMnZGIKgcYEEUInhMWTNwhR605cqv4NvF+6Aur5mf1Dlo:RsZvBArG/gcYEEUInhMWBw6icqeNjNmQ
- TLSH T16BC32AA9F890DE52C6D526B6FB4E418C33231778C3DE7106CE149E3477FB95A0A3A942
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
putita.arm6.elf
Resource
debian12-armhf-20260513-en
Malware Config
Targets
-
- Target putita.arm6.elf
- Size 125KB
- SHA256 533c98bb5892e4d1bc65e861bd5c9cc979401da825e26bbee312273103cd7094
- MD5 e990c4e7e1ed84582d69ac251a15f192
- SHA1 d14dd15498d0a823610adf83caabb072a4ee66ec
- SHA512 1db709012ce32b0bb24b4823b7b5d652711cc28b6b7fa7e0446c6426e3ba7037d7283da03284fce324515a98e8b4c1ceab70351e1d9f34fc75789495234aba53
- SSDEEP 3072:R74ICbzNB9v9/KUMnZGIKgcYEEUInhMWTNwhR605cqv4NvF+6Aur5mf1Dlo:RsZvBArG/gcYEEUInhMWBw6icqeNjNmQ
- TLSH T16BC32AA9F890DE52C6D526B6FB4E418C33231778C3DE7106CE149E3477FB95A0A3A942
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Deletes itself
-
Creates/modifies Cron job
Cron allows running tasks on a schedule, and is commonly used for malware persistence.
-
Creates/modifies environment variables
Creating/modifying environment variables is a common persistence mechanism.
-
Modifies systemd
Adds/ modifies systemd service files. Likely to achieve persistence.
-
Modifies Bash startup script
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
4XDG Autostart Entries
1Boot or Logon Initialization Scripts
2RC Scripts
2Create or Modify System Process
1Systemd Service
1Event Triggered Execution
1Unix Shell Configuration Modification
1Hijack Execution Flow
1Path Interception by PATH Environment Variable
1Scheduled Task/Job
1Cron
1Privilege Escalation
Boot or Logon Autostart Execution
4XDG Autostart Entries
1Boot or Logon Initialization Scripts
2RC Scripts
2Create or Modify System Process
1Systemd Service
1Event Triggered Execution
1Unix Shell Configuration Modification
1Hijack Execution Flow
1Path Interception by PATH Environment Variable
1Scheduled Task/Job
1Cron
1