General
- Target manta.armv6l.elf
- Size 236KB
- Sample261003-vwkncstblh
- SHA256 42a687253a41984e499b93163cb334388be2b603758f652d6a772090af0e1b8b
- MD5 0a9033f9e34838f77d06a86ea8a7993b
- SHA1 ee832dcd4173a7a5bfb2dc6c2660787affeb500f
- SHA512 65da49bc7bbdf59fdf4d6d9d7fc5c91be4a787f4cb541eb04f9776f771823bcf00294fa65bd24100d391564e46cbe6caffe8fb4acd885669769136742001edae
- SSDEEP 6144:PROotrJRXNNFnawu2cnVvU5qWbmTabMDmxRnTGCVAfQnm2:PRnnXhnawEVvU5qnTbDmxRnTGCVAfQnT
- TLSH T1F2341B0299518F53D1C21B7ABB9F425537336B3493DB7301EA28BFB42F47A9E0E2A511
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
manta.armv6l.elf
Resource
debian12-armhf-20260513-en
Malware Config
Targets
-
- Target manta.armv6l.elf
- Size 236KB
- SHA256 42a687253a41984e499b93163cb334388be2b603758f652d6a772090af0e1b8b
- MD5 0a9033f9e34838f77d06a86ea8a7993b
- SHA1 ee832dcd4173a7a5bfb2dc6c2660787affeb500f
- SHA512 65da49bc7bbdf59fdf4d6d9d7fc5c91be4a787f4cb541eb04f9776f771823bcf00294fa65bd24100d391564e46cbe6caffe8fb4acd885669769136742001edae
- SSDEEP 6144:PROotrJRXNNFnawu2cnVvU5qWbmTabMDmxRnTGCVAfQnm2:PRnnXhnawEVvU5qnTbDmxRnTGCVAfQnT
- TLSH T1F2341B0299518F53D1C21B7ABB9F425537336B3493DB7301EA28BFB42F47A9E0E2A511
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Creates/modifies Cron job
Cron allows running tasks on a schedule, and is commonly used for malware persistence.
-
Creates/modifies environment variables
Creating/modifying environment variables is a common persistence mechanism.
-
Modifies systemd
Adds/ modifies systemd service files. Likely to achieve persistence.
-
Write file to user bin folder
-
Modifies Bash startup script
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
4XDG Autostart Entries
1Boot or Logon Initialization Scripts
2RC Scripts
2Create or Modify System Process
1Systemd Service
1Event Triggered Execution
1Unix Shell Configuration Modification
1Hijack Execution Flow
1Path Interception by PATH Environment Variable
1Scheduled Task/Job
1Cron
1Privilege Escalation
Boot or Logon Autostart Execution
4XDG Autostart Entries
1Boot or Logon Initialization Scripts
2RC Scripts
2Create or Modify System Process
1Systemd Service
1Event Triggered Execution
1Unix Shell Configuration Modification
1Hijack Execution Flow
1Path Interception by PATH Environment Variable
1Scheduled Task/Job
1Cron
1