99f8470899bb80033d35fea9e86eb1c9b2b14f98df5cd1e1b81bfdee25312098

Analysis

max time kernel
3s
max time network
122s
platform
debian-12_armhf
resource
debian12-armhf-20260513-en
resource tags

arch:armhfimage:debian12-armhf-20260513-enkernel:6.1.0-17-armmp-lpaelocale:en-usos:debian-12-armhfsystem
submitted
16/05/2026, 02:48

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
99f8470899bb80033d35fea9e86eb1c9b2b14f98df5cd1e1b81bfdee25312098.elf
Size 2.1MB
Sample260516-dav4jaav2v
SHA256 99f8470899bb80033d35fea9e86eb1c9b2b14f98df5cd1e1b81bfdee25312098
MD5 a9595731d13f3cb1db64d526407a9ecf
SHA1 f9920281b3e7f91093c9d8c31fb0773a28c382d3
SHA512 ee11e0e3759f7562f291f9dd243a17c79cf6a91487fb65def05db0e23479d1f75244e4f9306e5b00a2d426251b18e994ad07afed4eb806153f8ebe712a9348b7
SSDEEP 49152:QJhSUnhFVkkOsnQJDEdl4EiMJs02pra5ossuH+cuJWhv9qK6aYy:Q+gbVLMEdlzH6BevecuJgv9qK6s
TLSH
T122A533E0A9D9A872A2DE501DFA2D7A7ED8267B11CFD7CD1FEC14269186C81BC3603503
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery

Malware Config

Signatures

Deletes itself 1 IoCs

pid	Process
789	99f8470899bb80033d35fea9e86eb1c9b2b14f98df5cd1e1b81bfdee25312098.elf

Enumerates kernel/hardware configuration 1 TTPs 1 IoCs

Reads contents of /sys virtual filesystem to enumerate system information.

discovery

System Information Discovery

T1082

description	ioc	Process
File opened for reading	/sys/kernel/mm/transparent_hugepage/hpage_pmd_size	99f8470899bb80033d35fea9e86eb1c9b2b14f98df5cd1e1b81bfdee25312098.elf

Reads runtime system information 1 IoCs

Reads data from /proc virtual filesystem.

discovery

description	ioc	Process
File opened for reading	/proc/self/exe	99f8470899bb80033d35fea9e86eb1c9b2b14f98df5cd1e1b81bfdee25312098.elf

/tmp/99f8470899bb80033d35fea9e86eb1c9b2b14f98df5cd1e1b81bfdee25312098.elf
/tmp/99f8470899bb80033d35fea9e86eb1c9b2b14f98df5cd1e1b81bfdee25312098.elf
1⤵
- Deletes itself
- Enumerates kernel/hardware configuration
- Reads runtime system information
PID:789

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads