General
- Target arm5.elf
- Size 5.6MB
- Sample261003-m1t4laxakb
- SHA256 08ff1a293519f919c4fce850a6794a4df1f1b12e4aa3d6a29ee2ae30ff948278
- MD5 3704c645ed75d8c9b0ece769f67a7d8d
- SHA1 df8cbb7cddd41ea5f1ae7fd499822b6043ee952c
- SHA512 68abe4c3d748c3f7f1b1a50deaba3ea0b45ac0602fa6c7eeb1e196b6bd8a8da254700c405840739058c8ef7add6499aa313c3419a9a0a619a7835efbe36f4753
- SSDEEP 49152:6nAFSpc5MENwJb7FNYtc5XLUsBcWbsvUk5ER:kyMFJ+AbsLER
- TLSH T15B461897B8D24943C4E4367BBDBD81C433631EBA9B8652566D05FE383ABE1D90E34348
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
arm5.elf
Resource
debian12-armhf-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target arm5.elf
- Size 5.6MB
- SHA256 08ff1a293519f919c4fce850a6794a4df1f1b12e4aa3d6a29ee2ae30ff948278
- MD5 3704c645ed75d8c9b0ece769f67a7d8d
- SHA1 df8cbb7cddd41ea5f1ae7fd499822b6043ee952c
- SHA512 68abe4c3d748c3f7f1b1a50deaba3ea0b45ac0602fa6c7eeb1e196b6bd8a8da254700c405840739058c8ef7add6499aa313c3419a9a0a619a7835efbe36f4753
- SSDEEP 49152:6nAFSpc5MENwJb7FNYtc5XLUsBcWbsvUk5ER:kyMFJ+AbsLER
- TLSH T15B461897B8D24943C4E4367BBDBD81C433631EBA9B8652566D05FE383ABE1D90E34348
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Creates/modifies environment variables
Creating/modifying environment variables is a common persistence mechanism.
-
Write file to user bin folder
-
Modifies Bash startup script
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Event Triggered Execution
1Unix Shell Configuration Modification
1Hijack Execution Flow
1Path Interception by PATH Environment Variable
1Privilege Escalation
Boot or Logon Autostart Execution
1Event Triggered Execution
1Unix Shell Configuration Modification
1Hijack Execution Flow
1Path Interception by PATH Environment Variable
1