General
- Target kushnet.arm6.elf
- Size 201KB
- Sample261022-vs4xtsdz4t
- SHA256 ff21f897c1e352f23d53a7c12932644ac59bca64688f101498f8a6838dfdf460
- MD5 af8b6b04facd5e4dbea4ff4bb2f3ec0a
- SHA1 f2cf20ca6bb073f5f95d731f74b346c89f07b369
- SHA512 c91a63db16fbde810583aa8597969aff72caad01a03b58ff08f8afd5d9fac5306094ffafa5914618fcb16a35fb3b01f4e06f3015214cf6bcc834818d674c18bb
- SSDEEP 6144:yQi+09ie++MVs1luRw2PJUQ7kb8JO5Uq4:w5iB+MVsew6UD8U5U
- TLSH T1DB141A4AF9418E51F58012FAFB5D82D83F1313FBC2FA7502DD195BB4279B85A0E3A942
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
kushnet.arm6.elf
Resource
debian12-armhf-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target kushnet.arm6.elf
- Size 201KB
- SHA256 ff21f897c1e352f23d53a7c12932644ac59bca64688f101498f8a6838dfdf460
- MD5 af8b6b04facd5e4dbea4ff4bb2f3ec0a
- SHA1 f2cf20ca6bb073f5f95d731f74b346c89f07b369
- SHA512 c91a63db16fbde810583aa8597969aff72caad01a03b58ff08f8afd5d9fac5306094ffafa5914618fcb16a35fb3b01f4e06f3015214cf6bcc834818d674c18bb
- SSDEEP 6144:yQi+09ie++MVs1luRw2PJUQ7kb8JO5Uq4:w5iB+MVsew6UD8U5U
- TLSH T1DB141A4AF9418E51F58012FAFB5D82D83F1313FBC2FA7502DD195BB4279B85A0E3A942
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Creates/modifies Cron job
Cron allows running tasks on a schedule, and is commonly used for malware persistence.
-
Enumerates running processes
Discovers information about currently running processes on the system
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Boot or Logon Initialization Scripts
1RC Scripts
1Scheduled Task/Job
1Cron
1