General
- Target d517cdeb39eb622b164c6301b9fc5c226f77b7856c5075cebe602489499ad380.elf
- Size 129KB
- Sample260819-cw36lavfkd
- SHA256 d517cdeb39eb622b164c6301b9fc5c226f77b7856c5075cebe602489499ad380
- MD5 723fb16580b9a029582ebe3f8633e766
- SHA1 61f581711e2cb6f17fe421ddb3f1a94ec3b5a106
- SHA512 f09e49dd0c149b537cb90f3ba95e583d78c4e5d5f9e984b0e8906c9d78ee13a6ca2462cda5decf920d81692c355d3c2e4de463d681235b4d56338e6508952889
- SSDEEP 3072:1TkWA0DWOZtr273463Fe69KYaz+BNYxbCoaFIdHxe5oLc7:1YWA0KOHKkEFeNYRNWbgGHg7
- TLSH T19CD3124EEBB96F038C0797B4BF44A5E0B0E8BF908921475C15BCB6890B06457E887DB1
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
d517cdeb39eb622b164c6301b9fc5c226f77b7856c5075cebe602489499ad380.elf
Resource
debian9-mipsbe-20260513-en
Malware Config
Targets
-
- Target d517cdeb39eb622b164c6301b9fc5c226f77b7856c5075cebe602489499ad380.elf
- Size 129KB
- SHA256 d517cdeb39eb622b164c6301b9fc5c226f77b7856c5075cebe602489499ad380
- MD5 723fb16580b9a029582ebe3f8633e766
- SHA1 61f581711e2cb6f17fe421ddb3f1a94ec3b5a106
- SHA512 f09e49dd0c149b537cb90f3ba95e583d78c4e5d5f9e984b0e8906c9d78ee13a6ca2462cda5decf920d81692c355d3c2e4de463d681235b4d56338e6508952889
- SSDEEP 3072:1TkWA0DWOZtr273463Fe69KYaz+BNYxbCoaFIdHxe5oLc7:1YWA0KOHKkEFeNYRNWbgGHg7
- TLSH T19CD3124EEBB96F038C0797B4BF44A5E0B0E8BF908921475C15BCB6890B06457E887DB1
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Deletes itself
-
Creates/modifies Cron job
Cron allows running tasks on a schedule, and is commonly used for malware persistence.
-
Creates/modifies environment variables
Creating/modifying environment variables is a common persistence mechanism.
-
Modifies systemd
Adds/ modifies systemd service files. Likely to achieve persistence.
-
Modifies Bash startup script
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
4XDG Autostart Entries
1Boot or Logon Initialization Scripts
2RC Scripts
2Create or Modify System Process
1Systemd Service
1Event Triggered Execution
1Unix Shell Configuration Modification
1Hijack Execution Flow
1Path Interception by PATH Environment Variable
1Scheduled Task/Job
1Cron
1Privilege Escalation
Boot or Logon Autostart Execution
4XDG Autostart Entries
1Boot or Logon Initialization Scripts
2RC Scripts
2Create or Modify System Process
1Systemd Service
1Event Triggered Execution
1Unix Shell Configuration Modification
1Hijack Execution Flow
1Path Interception by PATH Environment Variable
1Scheduled Task/Job
1Cron
1