General
- Target bin.armv6l
- Size 165KB
- Sample260523-spsz2set6w
- SHA256 a0fe9dfa134bd67a3d81053eaffe2e2e6e1e4c5a66e4de7acbe8b148301ff293
- MD5 0d4827018243f11ffa6cf7633f86de56
- SHA1 8f002dc5ed3d01af84c5989b73c901ad2f380cc5
- SHA512 a6bdb0166eb8529db0586de05ff80e958c44162f0cc5b8b7801f777d0ecac910067ea048af5ae1acc3365066da20de2a8eccc87ad2bf6e7b4e35843f7d8cd3c4
- SSDEEP 3072:GVKi6pcaEgSuAaTsYkjUk9K18a6k+6S/cCI7ar984Ts7:Xi6pcaEgS3a5uz9K76k+tcCjTs7
- TLSH T197F32B06EF428A57C4C20779BA9F43553323EBA893DB73039A18BB742F837D90E66515
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
Behavioral task
behavioral1
Sample
bin.armv6l
Resource
debian12-armhf-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target bin.armv6l
- Size 165KB
- SHA256 a0fe9dfa134bd67a3d81053eaffe2e2e6e1e4c5a66e4de7acbe8b148301ff293
- MD5 0d4827018243f11ffa6cf7633f86de56
- SHA1 8f002dc5ed3d01af84c5989b73c901ad2f380cc5
- SHA512 a6bdb0166eb8529db0586de05ff80e958c44162f0cc5b8b7801f777d0ecac910067ea048af5ae1acc3365066da20de2a8eccc87ad2bf6e7b4e35843f7d8cd3c4
- SSDEEP 3072:GVKi6pcaEgSuAaTsYkjUk9K18a6k+6S/cCI7ar984Ts7:Xi6pcaEgS3a5uz9K76k+tcCjTs7
- TLSH T197F32B06EF428A57C4C20779BA9F43553323EBA893DB73039A18BB742F837D90E66515
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Traces itself
Traces itself to prevent debugging attempts
-
Enumerates running processes
Discovers information about currently running processes on the system
-
Reads process memory
Read the memory of a process through the /proc virtual filesystem. This can be used to steal credentials.