General
- Target kushnet.arm7.elf
- Size 201KB
- Sample261022-vs3prsgv6q
- SHA256 393d58259a307bf92d0ff3e48e132e0446cef2cfdacc161c41e80074a3e09c1a
- MD5 eb3bd25d8ff2405d10976352aca04411
- SHA1 3a25f745c3b55b2c57185b624ce56f84f0b61bc2
- SHA512 125c9e881c22c063698bbe6897df292878016388a8e0144ccf29c91a05829267bb7c158ca3935804192fed24ccc6a1f0277d8c870d6475d0e93741caefb3cb1e
- SSDEEP 3072:ny27USVO4S0b+0ml2CJtphk17ktZ+Uppjl7Oho4RVkmbW8iapUq3D:ygUS4v0b+0mlR/nR7OhdRTq8iapUq3D
- TLSH T1F8141946F942CE52F58015F9FB5D83C83B1313F7C2FA75129D0A4BB82B9795A0E3A942
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
kushnet.arm7.elf
Resource
debian12-armhf-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target kushnet.arm7.elf
- Size 201KB
- SHA256 393d58259a307bf92d0ff3e48e132e0446cef2cfdacc161c41e80074a3e09c1a
- MD5 eb3bd25d8ff2405d10976352aca04411
- SHA1 3a25f745c3b55b2c57185b624ce56f84f0b61bc2
- SHA512 125c9e881c22c063698bbe6897df292878016388a8e0144ccf29c91a05829267bb7c158ca3935804192fed24ccc6a1f0277d8c870d6475d0e93741caefb3cb1e
- SSDEEP 3072:ny27USVO4S0b+0ml2CJtphk17ktZ+Uppjl7Oho4RVkmbW8iapUq3D:ygUS4v0b+0mlR/nR7OhdRTq8iapUq3D
- TLSH T1F8141946F942CE52F58015F9FB5D83C83B1313F7C2FA75129D0A4BB82B9795A0E3A942
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Creates/modifies Cron job
Cron allows running tasks on a schedule, and is commonly used for malware persistence.
-
Enumerates running processes
Discovers information about currently running processes on the system
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Boot or Logon Initialization Scripts
1RC Scripts
1Scheduled Task/Job
1Cron
1