General
- Target mips
- Size 259KB
- Sample261011-ce1ddady81
- SHA256 2602c8ebac36cb9fb34f2c7db7ebad82fdd8fc55ef804399edb5c13a43d19937
- MD5 85eb61c4ba353d268d6de3f73b9d2a3f
- SHA1 053a87cd4c3ce6985a6c08cd382a16268f3168fc
- SHA512 19f748a0693bfaab3e44c6ce2c4c5dec6b00cbf6caeafbc45e823aff501fe78469ad9050c7bd4259a362897999461c67a7e925346d44f53f58a2178d55e1560f
- SSDEEP 6144:TpHRpFeWBKNCbDv76CqzRns89RJ55kLbJPt1WbIh:TpxtL76CoRnskRJ55krh
- TLSH T18044A41A6A328F7DF378CB3447B74B30A75D22D616E1DA84E1ACD1041E2425E646FFAC
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
mips
Resource
debian9-mipsbe-20260513-en
Malware Config
Targets
-
- Target mips
- Size 259KB
- SHA256 2602c8ebac36cb9fb34f2c7db7ebad82fdd8fc55ef804399edb5c13a43d19937
- MD5 85eb61c4ba353d268d6de3f73b9d2a3f
- SHA1 053a87cd4c3ce6985a6c08cd382a16268f3168fc
- SHA512 19f748a0693bfaab3e44c6ce2c4c5dec6b00cbf6caeafbc45e823aff501fe78469ad9050c7bd4259a362897999461c67a7e925346d44f53f58a2178d55e1560f
- SSDEEP 6144:TpHRpFeWBKNCbDv76CqzRns89RJ55kLbJPt1WbIh:TpxtL76CoRnskRJ55krh
- TLSH T18044A41A6A328F7DF378CB3447B74B30A75D22D616E1DA84E1ACD1041E2425E646FFAC
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Deletes itself
-
Deletes system logs
Deletes log file which contains global system messages. Adversaries may delete system logs to minimize their footprint.
-
Modifies the /etc/hosts DNS resolution file
Modifying the /etc/hosts name-resolution file changes IP routing, which can facilitate traffic hijacking or the blocking of (security update) endpoints.
-
Creates/modifies Cron job
Cron allows running tasks on a schedule, and is commonly used for malware persistence.
-
Enumerates running processes
Discovers information about currently running processes on the system
-
Modifies systemd
Adds/ modifies systemd service files. Likely to achieve persistence.
MITRE ATT&CK Enterprise v16
Execution
Command and Scripting Interpreter
1Unix Shell
1Scheduled Task/Job
1Cron
1Persistence
Boot or Logon Autostart Execution
2XDG Autostart Entries
1Boot or Logon Initialization Scripts
1RC Scripts
1Create or Modify System Process
1Systemd Service
1Scheduled Task/Job
1Cron
1Privilege Escalation
Boot or Logon Autostart Execution
2XDG Autostart Entries
1Boot or Logon Initialization Scripts
1RC Scripts
1Create or Modify System Process
1Systemd Service
1Scheduled Task/Job
1Cron
1Defense Evasion
Indicator Removal
2Clear Linux or Mac System Logs
2Virtualization/Sandbox Evasion
1System Checks
1