General
- Target kushnet.arm6.elf
- Size 197KB
- Sample261001-prd25atfpf
- SHA256 08593e0e9821fe991a7d706791429fc4da3b38d7581627948051edce5b69edba
- MD5 b42c4963520e2481b5deba8245dcfc2e
- SHA1 8191ae9b208c69f74691eeb19bd037ad9c529320
- SHA512 77db6ab6768a6464d59458f8ec956023077c19cb5d9f75fcf4959f699eeb9fe713c5f07bb67f21e8bf210d7fd4ff1fb5b15ef2992ed73c0476bf8e042ef960b0
- SSDEEP 6144:ZaV9+wnDvvi9R77oftnABlmC5CtOP0t5+0qC+88U5Uq1:XEfqBlmCHPS+T8Z5U
- TLSH T16D14184AF8418E51F68012FABB5D82D83F1303FBD2FA7506DD195BB43B9745A0E3A942
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
kushnet.arm6.elf
Resource
debian12-armhf-20260127-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target kushnet.arm6.elf
- Size 197KB
- SHA256 08593e0e9821fe991a7d706791429fc4da3b38d7581627948051edce5b69edba
- MD5 b42c4963520e2481b5deba8245dcfc2e
- SHA1 8191ae9b208c69f74691eeb19bd037ad9c529320
- SHA512 77db6ab6768a6464d59458f8ec956023077c19cb5d9f75fcf4959f699eeb9fe713c5f07bb67f21e8bf210d7fd4ff1fb5b15ef2992ed73c0476bf8e042ef960b0
- SSDEEP 6144:ZaV9+wnDvvi9R77oftnABlmC5CtOP0t5+0qC+88U5Uq1:XEfqBlmCHPS+T8Z5U
- TLSH T16D14184AF8418E51F68012FABB5D82D83F1303FBD2FA7506DD195BB43B9745A0E3A942
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Creates/modifies Cron job
Cron allows running tasks on a schedule, and is commonly used for malware persistence.
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Boot or Logon Initialization Scripts
1RC Scripts
1Scheduled Task/Job
1Cron
1