General
- Target killbotx.mipsel.elf
- Size 163KB
- Sample260806-c54tgssalb
- SHA256 1c246410593a1d5bc31cf4d58c6905df5e30fa7948c23e82ed424d6c9e2198ec
- MD5 b539134199dfe15bb52c8dcfd47df01e
- SHA1 7e59d22ff7754f05f155d0eefe19cfc4d3aa9d67
- SHA512 06fe17b77a4aef2147e37ee22a4efbc7641c330847c639611dade161b2bb58e679e93972089b4f421f7060763c532c755ed5eebafeb6710c901779ad29adfc0e
- SSDEEP 3072:JgK/zPOoLvWIav3+RRMgtOzfd7V2eFBl8f5omb2kYubOQ8Magf8VX4bgy11lS6mF:qK/zPOoLvW1v3+RRMgtOzfd7A5omb2kq
- TLSH T1A3F32989EFA60FDFD46FCE30021E131719DD589B92F16336867CDD48769E6088AE3858
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
killbotx.mipsel.elf
Resource
debian12-mipsel-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target killbotx.mipsel.elf
- Size 163KB
- SHA256 1c246410593a1d5bc31cf4d58c6905df5e30fa7948c23e82ed424d6c9e2198ec
- MD5 b539134199dfe15bb52c8dcfd47df01e
- SHA1 7e59d22ff7754f05f155d0eefe19cfc4d3aa9d67
- SHA512 06fe17b77a4aef2147e37ee22a4efbc7641c330847c639611dade161b2bb58e679e93972089b4f421f7060763c532c755ed5eebafeb6710c901779ad29adfc0e
- SSDEEP 3072:JgK/zPOoLvWIav3+RRMgtOzfd7V2eFBl8f5omb2kYubOQ8Magf8VX4bgy11lS6mF:qK/zPOoLvW1v3+RRMgtOzfd7A5omb2kq
- TLSH T1A3F32989EFA60FDFD46FCE30021E131719DD589B92F16336867CDD48769E6088AE3858
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Creates/modifies Cron job
Cron allows running tasks on a schedule, and is commonly used for malware persistence.
-
Modifies systemd
Adds/ modifies systemd service files. Likely to achieve persistence.
-
Write file to user bin folder
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
2XDG Autostart Entries
1Boot or Logon Initialization Scripts
1RC Scripts
1Create or Modify System Process
1Systemd Service
1Scheduled Task/Job
1Cron
1