General
- Target d20f7f227a0ad614049787f56a978f75ba4346df240e486933d57e14d7117c13.elf
- Size 268KB
- Sample260823-d91s3adr3v
- SHA256 75325ee0f60bbd15b8d9e259db4fb8efcc6a7935540a6c2006a29d7dc4ea9b59
- MD5 906a2f156db9eea211d99905e08c6c4a
- SHA1 074cf442eb9c4e96f43f9a4e1707f2c661237a09
- SHA512 4be9fc26eeb6b4fb6b0cfc6d5aa7128ec8f758b41cb637f96a6254865802d8c57a564fe3ed6e1b13734fa5730aa15f8bdaa5b56fa479f0b260a7fde9f7238382
- SSDEEP 6144:+aCFthLMsXHuXOf9vjKZf44T2KVu/IB62GrZ/Nvyn:+aCF/4Uc/KrZtG
- TLSH T177444A5B7710CF35E329C5314AB38E5663E5265227E2C549F21CDE18AE6038D682FFE8
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
d20f7f227a0ad614049787f56a978f75ba4346df240e486933d57e14d7117c13.elf
Resource
debian9-mipsbe-20260513-en
Malware Config
Targets
-
- Target d20f7f227a0ad614049787f56a978f75ba4346df240e486933d57e14d7117c13.elf
- Size 268KB
- SHA256 75325ee0f60bbd15b8d9e259db4fb8efcc6a7935540a6c2006a29d7dc4ea9b59
- MD5 906a2f156db9eea211d99905e08c6c4a
- SHA1 074cf442eb9c4e96f43f9a4e1707f2c661237a09
- SHA512 4be9fc26eeb6b4fb6b0cfc6d5aa7128ec8f758b41cb637f96a6254865802d8c57a564fe3ed6e1b13734fa5730aa15f8bdaa5b56fa479f0b260a7fde9f7238382
- SSDEEP 6144:+aCFthLMsXHuXOf9vjKZf44T2KVu/IB62GrZ/Nvyn:+aCF/4Uc/KrZtG
- TLSH T177444A5B7710CF35E329C5314AB38E5663E5265227E2C549F21CDE18AE6038D682FFE8
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Deletes itself
-
Creates/modifies Cron job
Cron allows running tasks on a schedule, and is commonly used for malware persistence.
-
Creates/modifies environment variables
Creating/modifying environment variables is a common persistence mechanism.
-
Modifies systemd
Adds/ modifies systemd service files. Likely to achieve persistence.
-
Modifies Bash startup script
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
4XDG Autostart Entries
1Boot or Logon Initialization Scripts
2RC Scripts
2Create or Modify System Process
1Systemd Service
1Event Triggered Execution
1Unix Shell Configuration Modification
1Hijack Execution Flow
1Path Interception by PATH Environment Variable
1Scheduled Task/Job
1Cron
1Privilege Escalation
Boot or Logon Autostart Execution
4XDG Autostart Entries
1Boot or Logon Initialization Scripts
2RC Scripts
2Create or Modify System Process
1Systemd Service
1Event Triggered Execution
1Unix Shell Configuration Modification
1Hijack Execution Flow
1Path Interception by PATH Environment Variable
1Scheduled Task/Job
1Cron
1