Analysis
- max time kernel
112s - max time network
151s - platform
debian-12_armhf - resource
debian12-armhf-20260127-en - resource tags
- submitted
03/04/2026, 21:28
General
- Target arm7.elf
- Size 213KB
- Sample260403-1bdl7set9s
- SHA256 b9fc06697cabacbbadea8a4a80bf6681c5dd2e984f1ebe067e790531b347b886
Score
9/10
Malware Config
Signatures
- Contacts a large (84224) amount of remote hosts 1 TTPs
This may indicate a network scan to discover remotely running services.
- Creates a large amount of network flows 1 TTPs
This may indicate a network scan to discover remotely running services.
- Unexpected DNS network traffic destination 1 IoCs
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
- Changes its process name 1 IoCs
- Reads runtime system information 1 IoCs
Reads data from /proc virtual filesystem.
Processes
-
/tmp/arm7.elf/tmp/arm7.elf1⤵
- Changes its process name
- Reads runtime system information