General
- Target putita.mips.elf
- Size 82KB
- Sample260818-dkvkrafb26
- SHA256 6c325dd1fd740fbbbc566ad1a21d1bbb2be46e1ec5f2b4e7539fd5a5760e22b4
- MD5 e3c08fc0aa2600933294d51eb54cf201
- SHA1 3eae8dde6f4e69a1d54e58966823732c841a1385
- SHA512 0ebe1c61f57849be3afc7b7ae811db762167c544c0c697b55883d9bc55bb0c22403ad77a0047dc7ff8abf3aca47d227e07ec0ef848644def320385c5cfa1f5eb
- SSDEEP 1536:ZQVq5PSwsAwg0/rNaGOW29I3waSxqCkLd0SzQ1ovcZG/VlYQZCINzu983SrfAjuf:ZQVq5PSsINokTLdhU1VcvNzru7AuSBVc
- TLSH T165831227A8A8593FD660B03D0E561FCCBC1A43CE1E0CD10FD95D997966F42BB51C8B81
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
putita.mips.elf
Resource
debian9-mipsbe-20260513-en
Malware Config
Targets
-
- Target putita.mips.elf
- Size 82KB
- SHA256 6c325dd1fd740fbbbc566ad1a21d1bbb2be46e1ec5f2b4e7539fd5a5760e22b4
- MD5 e3c08fc0aa2600933294d51eb54cf201
- SHA1 3eae8dde6f4e69a1d54e58966823732c841a1385
- SHA512 0ebe1c61f57849be3afc7b7ae811db762167c544c0c697b55883d9bc55bb0c22403ad77a0047dc7ff8abf3aca47d227e07ec0ef848644def320385c5cfa1f5eb
- SSDEEP 1536:ZQVq5PSwsAwg0/rNaGOW29I3waSxqCkLd0SzQ1ovcZG/VlYQZCINzu983SrfAjuf:ZQVq5PSsINokTLdhU1VcvNzru7AuSBVc
- TLSH T165831227A8A8593FD660B03D0E561FCCBC1A43CE1E0CD10FD95D997966F42BB51C8B81
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Deletes itself
-
Creates/modifies Cron job
Cron allows running tasks on a schedule, and is commonly used for malware persistence.
-
Creates/modifies environment variables
Creating/modifying environment variables is a common persistence mechanism.
-
Modifies systemd
Adds/ modifies systemd service files. Likely to achieve persistence.
-
Modifies Bash startup script
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
4XDG Autostart Entries
1Boot or Logon Initialization Scripts
2RC Scripts
2Create or Modify System Process
1Systemd Service
1Event Triggered Execution
1Unix Shell Configuration Modification
1Hijack Execution Flow
1Path Interception by PATH Environment Variable
1Scheduled Task/Job
1Cron
1Privilege Escalation
Boot or Logon Autostart Execution
4XDG Autostart Entries
1Boot or Logon Initialization Scripts
2RC Scripts
2Create or Modify System Process
1Systemd Service
1Event Triggered Execution
1Unix Shell Configuration Modification
1Hijack Execution Flow
1Path Interception by PATH Environment Variable
1Scheduled Task/Job
1Cron
1