General
- Target arm6.elf
- Size 4.4MB
- Sample260809-h9qejshd54
- SHA256 b5dc81677b384f01e837374cc508362e2ece6a186f7f08009af3cac2ba7b7ff7
- MD5 4a09f8c92732d01c097d9a12cbbbc6da
- SHA1 5e85709d3f6e5336c4132f4eae5e81ce5b9496b4
- SHA512 a3caa4f23c4862286609b246a4e1d6c5cf02bfec8011a1dabc95e54ec291237878c0216b0739f48e81663a1e01b4f0c3a4732c22f01b309ea4fec087385b5e79
- SSDEEP 49152:pK3/ol8XVyc0aZGVDlANsCFpAAowUxKU1F1:I3/tXVyvaZGUN
- TLSH T14C261A97B8918683C4E4367BBCBD81C432672EB99B9712576D04FE3D3ABE1990E35304
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
arm6.elf
Resource
debian12-armhf-20260513-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target arm6.elf
- Size 4.4MB
- SHA256 b5dc81677b384f01e837374cc508362e2ece6a186f7f08009af3cac2ba7b7ff7
- MD5 4a09f8c92732d01c097d9a12cbbbc6da
- SHA1 5e85709d3f6e5336c4132f4eae5e81ce5b9496b4
- SHA512 a3caa4f23c4862286609b246a4e1d6c5cf02bfec8011a1dabc95e54ec291237878c0216b0739f48e81663a1e01b4f0c3a4732c22f01b309ea4fec087385b5e79
- SSDEEP 49152:pK3/ol8XVyc0aZGVDlANsCFpAAowUxKU1F1:I3/tXVyvaZGUN
- TLSH T14C261A97B8918683C4E4367BBCBD81C432672EB99B9712576D04FE3D3ABE1990E35304
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Creates/modifies Cron job
Cron allows running tasks on a schedule, and is commonly used for malware persistence.
-
Modifies systemd
Adds/ modifies systemd service files. Likely to achieve persistence.
-
Write file to user bin folder
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1XDG Autostart Entries
1Create or Modify System Process
1Systemd Service
1Scheduled Task/Job
1Cron
1