General
- Target mipsle
- Size 5.6MB
- Sample261007-aqsrkayw4l
- SHA256 01895d202757e4242b27a2b27f834d2b77b5ec5a4925c9f16c276cf0488b82b0
- MD5 0b1a6d66daf4f5701cde88fd2aede84b
- SHA1 e58d59344db960da354b606d20b6cd146dceea97
- SHA512 c950311ee43be45ae7d12a5ddb478b8d1d137f33ec24d03993d1afde9167f2b80f85f6845dbfdc83bf6c8fe3e8a122df427231b3b6d734a168767e19a8286812
- SSDEEP 49152:cJ6ocWmmCzj32VoroG0tbAohwBeULG4bS:pILYS
- TLSH T15D56F805ADC42BE7C06C8F7590EAC96122705D144AF14A2A66A4FFEDBC76234BF47D8C
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
mipsle
Resource
debian12-mipsel-20260513-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target mipsle
- Size 5.6MB
- SHA256 01895d202757e4242b27a2b27f834d2b77b5ec5a4925c9f16c276cf0488b82b0
- MD5 0b1a6d66daf4f5701cde88fd2aede84b
- SHA1 e58d59344db960da354b606d20b6cd146dceea97
- SHA512 c950311ee43be45ae7d12a5ddb478b8d1d137f33ec24d03993d1afde9167f2b80f85f6845dbfdc83bf6c8fe3e8a122df427231b3b6d734a168767e19a8286812
- SSDEEP 49152:cJ6ocWmmCzj32VoroG0tbAohwBeULG4bS:pILYS
- TLSH T15D56F805ADC42BE7C06C8F7590EAC96122705D144AF14A2A66A4FFEDBC76234BF47D8C
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Creates/modifies environment variables
Creating/modifying environment variables is a common persistence mechanism.
-
Write file to user bin folder
-
Modifies Bash startup script
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Event Triggered Execution
1Unix Shell Configuration Modification
1Hijack Execution Flow
1Path Interception by PATH Environment Variable
1Privilege Escalation
Boot or Logon Autostart Execution
1Event Triggered Execution
1Unix Shell Configuration Modification
1Hijack Execution Flow
1Path Interception by PATH Environment Variable
1