General
- Target ef3d10213d9f675454250c944738ddd96144fd64c3cea56970ab09b267783abb
- Size 88KB
- Sample260810-1fysyaag32
- SHA256 ef3d10213d9f675454250c944738ddd96144fd64c3cea56970ab09b267783abb
- MD5 f672b810aadacf793e9b4c78943427db
- SHA1 a69f73e8a9fb375bf241d7626c9112df245ae6ba
- SHA512 e32ab1de6104c31eb28059c3bdf4e9ac91ab1c8556bf0b1d488be93731f73df4f583ecb14968ec6df5e9352d79fc1b9fa8f57431bf04ad17885bf51dbd6d8a94
- SSDEEP 1536:HZwvW/+i4sb+qQr1KBc4R4LEbUcF+kvnyChe9hIxxdM3QIr:HZ2v1gcUR/QcFRB/xxdM5
- TLSH T13A933B55FD805E6AD9D2673BFB9F424C336303B4D3EB3003CD189A7862CDA5A4B29991
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
ef3d10213d9f675454250c944738ddd96144fd64c3cea56970ab09b267783abb
Resource
debian12-armhf-20260513-en
Malware Config
Targets
-
- Target ef3d10213d9f675454250c944738ddd96144fd64c3cea56970ab09b267783abb
- Size 88KB
- SHA256 ef3d10213d9f675454250c944738ddd96144fd64c3cea56970ab09b267783abb
- MD5 f672b810aadacf793e9b4c78943427db
- SHA1 a69f73e8a9fb375bf241d7626c9112df245ae6ba
- SHA512 e32ab1de6104c31eb28059c3bdf4e9ac91ab1c8556bf0b1d488be93731f73df4f583ecb14968ec6df5e9352d79fc1b9fa8f57431bf04ad17885bf51dbd6d8a94
- SSDEEP 1536:HZwvW/+i4sb+qQr1KBc4R4LEbUcF+kvnyChe9hIxxdM3QIr:HZ2v1gcUR/QcFRB/xxdM5
- TLSH T13A933B55FD805E6AD9D2673BFB9F424C336303B4D3EB3003CD189A7862CDA5A4B29991
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Deletes itself
-
Creates/modifies Cron job
Cron allows running tasks on a schedule, and is commonly used for malware persistence.
-
Creates/modifies environment variables
Creating/modifying environment variables is a common persistence mechanism.
-
Modifies systemd
Adds/ modifies systemd service files. Likely to achieve persistence.
-
Modifies Bash startup script
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
4XDG Autostart Entries
1Boot or Logon Initialization Scripts
2RC Scripts
2Create or Modify System Process
1Systemd Service
1Event Triggered Execution
1Unix Shell Configuration Modification
1Hijack Execution Flow
1Path Interception by PATH Environment Variable
1Scheduled Task/Job
1Cron
1Privilege Escalation
Boot or Logon Autostart Execution
4XDG Autostart Entries
1Boot or Logon Initialization Scripts
2RC Scripts
2Create or Modify System Process
1Systemd Service
1Event Triggered Execution
1Unix Shell Configuration Modification
1Hijack Execution Flow
1Path Interception by PATH Environment Variable
1Scheduled Task/Job
1Cron
1