General
- Target mips.elf
- Size 457KB
- Sample260828-xtf89sstat
- SHA256 839cdbeb38b7d67f5920442c275cc2d6fa0bea601ec37b9fdf16c21266440101
- MD5 79b5e34637a8995f8544f599f4ad9bee
- SHA1 4b9a1da497b9d52b02210209d1c8cc168ec1472c
- SHA512 b87e66dd2eb2c18816b93ed02bb7d88b4b46874507745ae207d3bd749af747ee8932686994748aa28f885db698671089b0a9951d1210917e885c5be2829ac5a6
- SSDEEP 6144:tfXv0t0G0kIcIHVRyZHP7l+BMpOM8HVNNqbqfXqPjXM4vj:tvmIzw5g+OVXX2j84vj
- TLSH T181A4F98953F1DFD9F268E93003736E1B5DB6063735D3A186E16EE92233A524844AFE70
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
mips.elf
Resource
debian9-mipsbe-20260513-en
Malware Config
Targets
-
- Target mips.elf
- Size 457KB
- SHA256 839cdbeb38b7d67f5920442c275cc2d6fa0bea601ec37b9fdf16c21266440101
- MD5 79b5e34637a8995f8544f599f4ad9bee
- SHA1 4b9a1da497b9d52b02210209d1c8cc168ec1472c
- SHA512 b87e66dd2eb2c18816b93ed02bb7d88b4b46874507745ae207d3bd749af747ee8932686994748aa28f885db698671089b0a9951d1210917e885c5be2829ac5a6
- SSDEEP 6144:tfXv0t0G0kIcIHVRyZHP7l+BMpOM8HVNNqbqfXqPjXM4vj:tvmIzw5g+OVXX2j84vj
- TLSH T181A4F98953F1DFD9F268E93003736E1B5DB6063735D3A186E16EE92233A524844AFE70
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Traces itself
Traces itself to prevent debugging attempts
-
Creates/modifies Cron job
Cron allows running tasks on a schedule, and is commonly used for malware persistence.
-
Creates/modifies environment variables
Creating/modifying environment variables is a common persistence mechanism.
-
Modifies systemd
Adds/ modifies systemd service files. Likely to achieve persistence.
-
Write file to user bin folder
-
Writes file to system bin folder
-
Modifies Bash startup script
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
5XDG Autostart Entries
2Boot or Logon Initialization Scripts
2RC Scripts
2Create or Modify System Process
1Systemd Service
1Event Triggered Execution
1Unix Shell Configuration Modification
1Hijack Execution Flow
1Path Interception by PATH Environment Variable
1Scheduled Task/Job
1Cron
1Privilege Escalation
Boot or Logon Autostart Execution
5XDG Autostart Entries
2Boot or Logon Initialization Scripts
2RC Scripts
2Create or Modify System Process
1Systemd Service
1Event Triggered Execution
1Unix Shell Configuration Modification
1Hijack Execution Flow
1Path Interception by PATH Environment Variable
1Scheduled Task/Job
1Cron
1