General
- Target putita.mpsl
- Size 81KB
- Sample260816-ppwjdsar5s
- SHA256 0585ac1996c03e4fc9a711e5f75df010514b058ddefdd0c6628da6a956c55273
- MD5 b634716100d05a00973e8e68d8d05732
- SHA1 2b96beb92a77eef44aa21a2396da0a3363c37aab
- SHA512 c3c94afc7942ac09f41264e5d2d96e3d6285139e200dd0b0a9918d817c92ff0b202afcbb7fa7fd659c0378c1f555f40f862c59dfa0d6cfe3c0305537b88ddd11
- SSDEEP 1536:E5l7oZnsG2x8pNo3pquTGIa987CcLsSGw4hzHiBsJVawvpMr/FW+4Jj0G7:E51SnsG2eoQuTvi8OOGw4hjlzaw6DFWH
- TLSH T11883125B08D01B97EE41C8BE8B539C612BE87F6A0FE98513469841935B42CCCD70DBAF
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
putita.mpsl
Resource
debian12-mipsel-20260513-en
Malware Config
Targets
-
- Target putita.mpsl
- Size 81KB
- SHA256 0585ac1996c03e4fc9a711e5f75df010514b058ddefdd0c6628da6a956c55273
- MD5 b634716100d05a00973e8e68d8d05732
- SHA1 2b96beb92a77eef44aa21a2396da0a3363c37aab
- SHA512 c3c94afc7942ac09f41264e5d2d96e3d6285139e200dd0b0a9918d817c92ff0b202afcbb7fa7fd659c0378c1f555f40f862c59dfa0d6cfe3c0305537b88ddd11
- SSDEEP 1536:E5l7oZnsG2x8pNo3pquTGIa987CcLsSGw4hzHiBsJVawvpMr/FW+4Jj0G7:E51SnsG2eoQuTvi8OOGw4hjlzaw6DFWH
- TLSH T11883125B08D01B97EE41C8BE8B539C612BE87F6A0FE98513469841935B42CCCD70DBAF
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Deletes itself
-
Creates/modifies Cron job
Cron allows running tasks on a schedule, and is commonly used for malware persistence.
-
Creates/modifies environment variables
Creating/modifying environment variables is a common persistence mechanism.
-
Modifies systemd
Adds/ modifies systemd service files. Likely to achieve persistence.
-
Modifies Bash startup script
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
4XDG Autostart Entries
1Boot or Logon Initialization Scripts
2RC Scripts
2Create or Modify System Process
1Systemd Service
1Event Triggered Execution
1Unix Shell Configuration Modification
1Hijack Execution Flow
1Path Interception by PATH Environment Variable
1Scheduled Task/Job
1Cron
1Privilege Escalation
Boot or Logon Autostart Execution
4XDG Autostart Entries
1Boot or Logon Initialization Scripts
2RC Scripts
2Create or Modify System Process
1Systemd Service
1Event Triggered Execution
1Unix Shell Configuration Modification
1Hijack Execution Flow
1Path Interception by PATH Environment Variable
1Scheduled Task/Job
1Cron
1