General
- Target b05f75e7fad53ada4a99d4ee157560fde73cc245ede5a4a329b2b5c11c44dc50.elf
- Size 82KB
- Sample260819-ax8flabm9v
- SHA256 b05f75e7fad53ada4a99d4ee157560fde73cc245ede5a4a329b2b5c11c44dc50
- MD5 5ae5c75d86c951fb6440c170d607b090
- SHA1 197e7c028d66e1b9f008ffa61616b7f30676395f
- SHA512 76bd9a0baf60192582891772b173066828d91c5735b86164fb0d60ad9694e6b0289746087e9b87dd79efca34f6c4b233a290e18b1da240ffe6d5c8a4eb2b4611
- SSDEEP 1536:CCdpMFjT7JrO/RUhg5JonsdlK4in0XVQJxpg7xTVFjKZn7bfLbEh09:5Lg0vEns/K4+0XaJxpgdJdG7rLwh09
- TLSH T1CA8302058B1C93CFF721A6B07573C06869B19B0DEFE565127EF96B802F054BFD14A4A2
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
b05f75e7fad53ada4a99d4ee157560fde73cc245ede5a4a329b2b5c11c44dc50.elf
Resource
debian12-mipsel-20260513-en
Malware Config
Targets
-
- Target b05f75e7fad53ada4a99d4ee157560fde73cc245ede5a4a329b2b5c11c44dc50.elf
- Size 82KB
- SHA256 b05f75e7fad53ada4a99d4ee157560fde73cc245ede5a4a329b2b5c11c44dc50
- MD5 5ae5c75d86c951fb6440c170d607b090
- SHA1 197e7c028d66e1b9f008ffa61616b7f30676395f
- SHA512 76bd9a0baf60192582891772b173066828d91c5735b86164fb0d60ad9694e6b0289746087e9b87dd79efca34f6c4b233a290e18b1da240ffe6d5c8a4eb2b4611
- SSDEEP 1536:CCdpMFjT7JrO/RUhg5JonsdlK4in0XVQJxpg7xTVFjKZn7bfLbEh09:5Lg0vEns/K4+0XaJxpgdJdG7rLwh09
- TLSH T1CA8302058B1C93CFF721A6B07573C06869B19B0DEFE565127EF96B802F054BFD14A4A2
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Deletes itself
-
Creates/modifies Cron job
Cron allows running tasks on a schedule, and is commonly used for malware persistence.
-
Creates/modifies environment variables
Creating/modifying environment variables is a common persistence mechanism.
-
Modifies systemd
Adds/ modifies systemd service files. Likely to achieve persistence.
-
Modifies Bash startup script
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
4XDG Autostart Entries
1Boot or Logon Initialization Scripts
2RC Scripts
2Create or Modify System Process
1Systemd Service
1Event Triggered Execution
1Unix Shell Configuration Modification
1Hijack Execution Flow
1Path Interception by PATH Environment Variable
1Scheduled Task/Job
1Cron
1Privilege Escalation
Boot or Logon Autostart Execution
4XDG Autostart Entries
1Boot or Logon Initialization Scripts
2RC Scripts
2Create or Modify System Process
1Systemd Service
1Event Triggered Execution
1Unix Shell Configuration Modification
1Hijack Execution Flow
1Path Interception by PATH Environment Variable
1Scheduled Task/Job
1Cron
1