General
- Target nklarm7.elf
- Size 105KB
- Sample260126-3b6dbsd12d
- SHA256 75aceb402420e35ca4c6c38ceee28704048a949d53c22631a2a70a4e15698bdb
- MD5 e2814f7668f2ded665c67ff19a06b0e2
- SHA1 11d19dd4d27e979cd8b349f15c5d373a34ce08ff
- SHA512 3b725adcc1514e0f93d04f72f18ca81580b7e936bda5d8745a8f7d2286103acf1378f0e8cdb9770333b1e330bc6b6e65b272aae3a3d6a845b5ab893de77b8362
- SSDEEP 3072:n6Ge/jNaMrza3Es8fbVTeAhNuHQFKY53V2dZpx2NX:HMrzAUVpuHQFKYpV2dzx
- MD5 SHA1 SHA512 SSDEEP
Score
9/10
Static task
static1
Behavioral task
behavioral1
Sample
nklarm7.elf
Resource
debian12-armhf-20260126-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target nklarm7.elf
- Size 105KB
- SHA256 75aceb402420e35ca4c6c38ceee28704048a949d53c22631a2a70a4e15698bdb
- MD5 e2814f7668f2ded665c67ff19a06b0e2
- SHA1 11d19dd4d27e979cd8b349f15c5d373a34ce08ff
- SHA512 3b725adcc1514e0f93d04f72f18ca81580b7e936bda5d8745a8f7d2286103acf1378f0e8cdb9770333b1e330bc6b6e65b272aae3a3d6a845b5ab893de77b8362
- SSDEEP 3072:n6Ge/jNaMrza3Es8fbVTeAhNuHQFKY53V2dZpx2NX:HMrzAUVpuHQFKYpV2dzx
- MD5 SHA1 SHA512 SSDEEP
Score9/10-
Contacts a large (114333) amount of remote hosts
This may indicate a network scan to discover remotely running services.
-
Creates a large amount of network flows
This may indicate a network scan to discover remotely running services.
-
Deletes itself
-
Executes dropped EXE
-
Enumerates running processes
Discovers information about currently running processes on the system