General
- Target putita.x86.elf
- Size 237KB
- Sample260824-szvlmaea76
- SHA256 13967a1f8467a05a8a162856547c123359029fccf00c8c2bb1988daa1a451d86
- MD5 0b2ba46afccaa061822913813be116d2
- SHA1 1872b08139c6e0ed1d64380b04b6ff729224272f
- SHA512 1de436a9818845dd868316e24091f3ae970a6c062796f0f1d4c474d5b4896023c2a1b27706b03157f2c4a95e6933ffa7da164b5ff30c9b1bf71da7ffc47bc9c0
- SSDEEP 6144:uCg31iOqF4Snyg+ZTD3LsE8oWXCg+ei4ddtkcus:uCg31iOq+SNGnz8Xh5i4dlu
- TLSH T180347D49FE47D0F0EA9309F0211AE76FBA356A325136F5E2FF893A22F4B1701594925C
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
putita.x86.elf
Resource
ubuntu1804-amd64-20260513-en
Malware Config
Targets
-
- Target putita.x86.elf
- Size 237KB
- SHA256 13967a1f8467a05a8a162856547c123359029fccf00c8c2bb1988daa1a451d86
- MD5 0b2ba46afccaa061822913813be116d2
- SHA1 1872b08139c6e0ed1d64380b04b6ff729224272f
- SHA512 1de436a9818845dd868316e24091f3ae970a6c062796f0f1d4c474d5b4896023c2a1b27706b03157f2c4a95e6933ffa7da164b5ff30c9b1bf71da7ffc47bc9c0
- SSDEEP 6144:uCg31iOqF4Snyg+ZTD3LsE8oWXCg+ei4ddtkcus:uCg31iOq+SNGnz8Xh5i4dlu
- TLSH T180347D49FE47D0F0EA9309F0211AE76FBA356A325136F5E2FF893A22F4B1701594925C
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Deletes itself
-
Creates/modifies Cron job
Cron allows running tasks on a schedule, and is commonly used for malware persistence.
-
Creates/modifies environment variables
Creating/modifying environment variables is a common persistence mechanism.
-
Modifies systemd
Adds/ modifies systemd service files. Likely to achieve persistence.
-
Modifies Bash startup script
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
4XDG Autostart Entries
1Boot or Logon Initialization Scripts
2RC Scripts
2Create or Modify System Process
1Systemd Service
1Event Triggered Execution
1Unix Shell Configuration Modification
1Hijack Execution Flow
1Path Interception by PATH Environment Variable
1Scheduled Task/Job
1Cron
1Privilege Escalation
Boot or Logon Autostart Execution
4XDG Autostart Entries
1Boot or Logon Initialization Scripts
2RC Scripts
2Create or Modify System Process
1Systemd Service
1Event Triggered Execution
1Unix Shell Configuration Modification
1Hijack Execution Flow
1Path Interception by PATH Environment Variable
1Scheduled Task/Job
1Cron
1