General
- Target kushnet.arm4l.elf
- Size 201KB
- Sample261001-prd25atfpe
- SHA256 cb392b00a816c6133552cf3adc84ffc5588c284bef03078dcfb843d34e196034
- MD5 98adbf4b04578c5157c4631a94e816a6
- SHA1 896bef5fc7e373809e285efe91049f3770e671f9
- SHA512 f1b267ec936225a136d72d59f701b114c61623444e2371c18bce3681846ec319b0911a06fa519b4f479c42e79c8386a04ccf43af87e8f48009050f65f77df8bf
- SSDEEP 6144:0CuLRdkzUJiJPAIy+De82q8sl2U8pT5Uqz:yjkzUJiJPAmezqj8N5U
- TLSH T11D14075AF8418E51F5D026F9FB8D82D83B1303FBD2FA74069D054BB527DB89A0E3A542
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
kushnet.arm4l.elf
Resource
debian12-armhf-20260127-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target kushnet.arm4l.elf
- Size 201KB
- SHA256 cb392b00a816c6133552cf3adc84ffc5588c284bef03078dcfb843d34e196034
- MD5 98adbf4b04578c5157c4631a94e816a6
- SHA1 896bef5fc7e373809e285efe91049f3770e671f9
- SHA512 f1b267ec936225a136d72d59f701b114c61623444e2371c18bce3681846ec319b0911a06fa519b4f479c42e79c8386a04ccf43af87e8f48009050f65f77df8bf
- SSDEEP 6144:0CuLRdkzUJiJPAIy+De82q8sl2U8pT5Uqz:yjkzUJiJPAmezqj8N5U
- TLSH T11D14075AF8418E51F5D026F9FB8D82D83B1303FBD2FA74069D054BB527DB89A0E3A542
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Creates/modifies Cron job
Cron allows running tasks on a schedule, and is commonly used for malware persistence.
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Boot or Logon Initialization Scripts
1RC Scripts
1Scheduled Task/Job
1Cron
1