General
- Target arm7.elf
- Size 109KB
- Sample260806-dcdbhacm7z
- SHA256 62885ef62f5ce8dbb0df9f8a8a9955f6badc1ff303d5b9c5b1338082f1c5b5f5
- MD5 714f66cf57a6859cea8b7e5ae350ceae
- SHA1 a51e6e8b872c93d33db2d07a04776d65237ada53
- SHA512 1b66e9b87cf381bb8083423deb4b30d9148c9489083cab28f6ee01336216150a6a93cf6681376f63000d345a5b410e342af0938a5bafe6af96776b7af9166f3d
- SSDEEP 3072:k4h68rMJxEB6b1nhalD/ljR8kI/iKbU4:k4hlMJxEQzalD/ljR8F1U4
- TLSH T122B30855F880CA52CAD52679FF4E428D336317B8D3D93102CE24AE3577FA99A4B3B901
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
arm7.elf
Resource
debian12-armhf-20260513-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target arm7.elf
- Size 109KB
- SHA256 62885ef62f5ce8dbb0df9f8a8a9955f6badc1ff303d5b9c5b1338082f1c5b5f5
- MD5 714f66cf57a6859cea8b7e5ae350ceae
- SHA1 a51e6e8b872c93d33db2d07a04776d65237ada53
- SHA512 1b66e9b87cf381bb8083423deb4b30d9148c9489083cab28f6ee01336216150a6a93cf6681376f63000d345a5b410e342af0938a5bafe6af96776b7af9166f3d
- SSDEEP 3072:k4h68rMJxEB6b1nhalD/ljR8kI/iKbU4:k4hlMJxEQzalD/ljR8F1U4
- TLSH T122B30855F880CA52CAD52679FF4E428D336317B8D3D93102CE24AE3577FA99A4B3B901
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Creates/modifies Cron job
Cron allows running tasks on a schedule, and is commonly used for malware persistence.
-
Modifies systemd
Adds/ modifies systemd service files. Likely to achieve persistence.
-
Write file to user bin folder
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
2XDG Autostart Entries
1Boot or Logon Initialization Scripts
1RC Scripts
1Create or Modify System Process
1Systemd Service
1Scheduled Task/Job
1Cron
1