3b93b18ae4f3aad450897e7d02346b843e38358a0c51b834d1971824c0a30b97

Analysis

max time kernel
1s
max time network
2s
platform
debian-9_armhf
resource
debian9-armhf-20240418-en
resource tags

arch:armhfimage:debian9-armhf-20240418-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem
submitted
07/03/2025, 01:22

Target
086b2b1365633bfd4908892c4a2c5aa1_086b2b1365633bfd4908892c4a2c5aa1
Size 4.5MB
Sample250307-brkm1s1wdy
SHA256 3b93b18ae4f3aad450897e7d02346b843e38358a0c51b834d1971824c0a30b97
MD5 086b2b1365633bfd4908892c4a2c5aa1
SHA1 5f61b11fdd7f1fa7c455f15f2c59ddcdbde5d88a
SHA512 8d1c804b394396200903439b792a497e6debef54c25e71d2663bd3bdfd760e93858bcaef6a3539bf1b1c1d7d2b2b4be371a799ed14e759e565acdca9336f4b31
SSDEEP 49152:dOBY+zjUQunxaTGf+z8oRUTmRDVr9K43xjoneTKQ1GjgeA:dSNzjUFxaEoRUKZy+eA
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

discovery

Enumerates kernel/hardware configuration 1 TTPs 1 IoCs

Reads contents of /sys virtual filesystem to enumerate system information.

System Information Discovery

description	ioc	Process
File opened for reading	/sys/kernel/mm/transparent_hugepage/hpage_pmd_size	086b2b1365633bfd4908892c4a2c5aa1_086b2b1365633bfd4908892c4a2c5aa1

/tmp/086b2b1365633bfd4908892c4a2c5aa1_086b2b1365633bfd4908892c4a2c5aa1
/tmp/086b2b1365633bfd4908892c4a2c5aa1_086b2b1365633bfd4908892c4a2c5aa1
1⤵
- Enumerates kernel/hardware configuration
PID:647

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact