General
- Target putita.x86.elf
- Size 61KB
- Sample260818-dhrq3sfa98
- SHA256 3655b2ab2b5cf210abfa356ab2d9832735b04220764728f6711d4eb09b75fc76
- MD5 b0aec73960a401158ec63a8419d5647b
- SHA1 173f251792f4075d59ec70e890bd46369c60c238
- SHA512 da412c4e77497c957529d67950da862d3b4e0c90cb1ee182098481f96c39b6bf30a4e4f1bc132a93a21d829f987b7a8a200c6f7ee6ba3cdfba0a386e2ea0423f
- SSDEEP 1536:IHILBpLLGdYTKq0HBEPHHpTMik62hG2vYzT8Inouy8DMs:cgDLLG6TKHCHxVkDrizoutDMs
- TLSH T1FC530195F999574DDEF8D17AF9AE3F0A0818D204D262CBD4D9C4052A8017338BE1EF9E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
putita.x86.elf
Resource
ubuntu1804-amd64-20260513-en
Malware Config
Targets
-
- Target putita.x86.elf
- Size 61KB
- SHA256 3655b2ab2b5cf210abfa356ab2d9832735b04220764728f6711d4eb09b75fc76
- MD5 b0aec73960a401158ec63a8419d5647b
- SHA1 173f251792f4075d59ec70e890bd46369c60c238
- SHA512 da412c4e77497c957529d67950da862d3b4e0c90cb1ee182098481f96c39b6bf30a4e4f1bc132a93a21d829f987b7a8a200c6f7ee6ba3cdfba0a386e2ea0423f
- SSDEEP 1536:IHILBpLLGdYTKq0HBEPHHpTMik62hG2vYzT8Inouy8DMs:cgDLLG6TKHCHxVkDrizoutDMs
- TLSH T1FC530195F999574DDEF8D17AF9AE3F0A0818D204D262CBD4D9C4052A8017338BE1EF9E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Deletes itself
-
Creates/modifies Cron job
Cron allows running tasks on a schedule, and is commonly used for malware persistence.
-
Creates/modifies environment variables
Creating/modifying environment variables is a common persistence mechanism.
-
Modifies systemd
Adds/ modifies systemd service files. Likely to achieve persistence.
-
Modifies Bash startup script
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
4XDG Autostart Entries
1Boot or Logon Initialization Scripts
2RC Scripts
2Create or Modify System Process
1Systemd Service
1Event Triggered Execution
1Unix Shell Configuration Modification
1Hijack Execution Flow
1Path Interception by PATH Environment Variable
1Scheduled Task/Job
1Cron
1Privilege Escalation
Boot or Logon Autostart Execution
4XDG Autostart Entries
1Boot or Logon Initialization Scripts
2RC Scripts
2Create or Modify System Process
1Systemd Service
1Event Triggered Execution
1Unix Shell Configuration Modification
1Hijack Execution Flow
1Path Interception by PATH Environment Variable
1Scheduled Task/Job
1Cron
1