General
- Target 109.123.243.121_sample.bin
- Size 6.3MB
- Sample261012-vdv2dat18p
- SHA256 fbbaf70adb554b54af4ac4297affab842455a7a911eee631801e3094029816c8
- MD5 3f02a5eeb4ccfa539c2b7059d2bc6c40
- SHA1 818ff47c422172ec8ffb6854c099bfa4ed84c5c2
- SHA512 cec57091dac196d3b6bb15a6265281e80dba8884037fa7a6a444367945b74eb0ddc501f4129a6a1e8b50c37273f5e78bba41a469fadd7759598d9cbcb8a3b0e7
- SSDEEP 49152:k+CyaFAfKkrZQNhuEWQS3U18yGMWWtydxaM16yz82D5EL:0IEzPzmWeNQyz821EL
- TLSH T15966F915AD842BEAC46C4B7544FAC95A23705D140AF14B3A26A4FFEDBC762787F0788C
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
109.123.243.121_sample.bin
Resource
debian12-mipsel-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 109.123.243.121_sample.bin
- Size 6.3MB
- SHA256 fbbaf70adb554b54af4ac4297affab842455a7a911eee631801e3094029816c8
- MD5 3f02a5eeb4ccfa539c2b7059d2bc6c40
- SHA1 818ff47c422172ec8ffb6854c099bfa4ed84c5c2
- SHA512 cec57091dac196d3b6bb15a6265281e80dba8884037fa7a6a444367945b74eb0ddc501f4129a6a1e8b50c37273f5e78bba41a469fadd7759598d9cbcb8a3b0e7
- SSDEEP 49152:k+CyaFAfKkrZQNhuEWQS3U18yGMWWtydxaM16yz82D5EL:0IEzPzmWeNQyz821EL
- TLSH T15966F915AD842BEAC46C4B7544FAC95A23705D140AF14B3A26A4FFEDBC762787F0788C
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Creates/modifies Cron job
Cron allows running tasks on a schedule, and is commonly used for malware persistence.
-
Modifies systemd
Adds/ modifies systemd service files. Likely to achieve persistence.
MITRE ATT&CK Enterprise v16
Execution
Command and Scripting Interpreter
1Unix Shell
1Scheduled Task/Job
1Cron
1Persistence
Boot or Logon Autostart Execution
2XDG Autostart Entries
1Boot or Logon Initialization Scripts
1RC Scripts
1Create or Modify System Process
1Systemd Service
1Scheduled Task/Job
1Cron
1