General
- Target 32e4b08f6718e978367001c89764037397eaa6b4d44b99674c509aef2de758d5.elf
- Size 133KB
- Sample260823-ypds1sbb77
- SHA256 32e4b08f6718e978367001c89764037397eaa6b4d44b99674c509aef2de758d5
- MD5 4d24c4044ac2cdf9531084e0585a9cd2
- SHA1 63f62d1c7c81e1ad87ce8ced09d9ec3a715a72eb
- SHA512 f88c084ba55ba27790007cd197ebe878b4604507b1784ab79ef8a2f7f0b0d941253ad64d982bc43f95debf89e920d80f9d63e1c07d2ab6db17bc6930c4752391
- SSDEEP 3072:mrkhMF/1ece+VF4Xq8LvcQhUVqDdHahVsDS/vUvYnKxmsFtGMAlOXmP:UeMFNDdIX5cQGodc6+ax57Er
- TLSH T1F7D312CBAC5C48A3C6D44971837C563F8DE66B3BBAC4A23D655AEE00151C0B6D7235E3
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
32e4b08f6718e978367001c89764037397eaa6b4d44b99674c509aef2de758d5.elf
Resource
debian9-mipsbe-20260513-en
Malware Config
Targets
-
- Target 32e4b08f6718e978367001c89764037397eaa6b4d44b99674c509aef2de758d5.elf
- Size 133KB
- SHA256 32e4b08f6718e978367001c89764037397eaa6b4d44b99674c509aef2de758d5
- MD5 4d24c4044ac2cdf9531084e0585a9cd2
- SHA1 63f62d1c7c81e1ad87ce8ced09d9ec3a715a72eb
- SHA512 f88c084ba55ba27790007cd197ebe878b4604507b1784ab79ef8a2f7f0b0d941253ad64d982bc43f95debf89e920d80f9d63e1c07d2ab6db17bc6930c4752391
- SSDEEP 3072:mrkhMF/1ece+VF4Xq8LvcQhUVqDdHahVsDS/vUvYnKxmsFtGMAlOXmP:UeMFNDdIX5cQGodc6+ax57Er
- TLSH T1F7D312CBAC5C48A3C6D44971837C563F8DE66B3BBAC4A23D655AEE00151C0B6D7235E3
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Deletes itself
-
Creates/modifies Cron job
Cron allows running tasks on a schedule, and is commonly used for malware persistence.
-
Creates/modifies environment variables
Creating/modifying environment variables is a common persistence mechanism.
-
Modifies systemd
Adds/ modifies systemd service files. Likely to achieve persistence.
-
Modifies Bash startup script
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
4XDG Autostart Entries
1Boot or Logon Initialization Scripts
2RC Scripts
2Create or Modify System Process
1Systemd Service
1Event Triggered Execution
1Unix Shell Configuration Modification
1Hijack Execution Flow
1Path Interception by PATH Environment Variable
1Scheduled Task/Job
1Cron
1Privilege Escalation
Boot or Logon Autostart Execution
4XDG Autostart Entries
1Boot or Logon Initialization Scripts
2RC Scripts
2Create or Modify System Process
1Systemd Service
1Event Triggered Execution
1Unix Shell Configuration Modification
1Hijack Execution Flow
1Path Interception by PATH Environment Variable
1Scheduled Task/Job
1Cron
1