General
- Target wife.arm7
- Size 55KB
- Sample260524-xewemsgz4w
- SHA256 ae6e8d633bbb941e3cfa16aa96be1b11534251e4b50cae5e86999a587b44dc38
- MD5 91036f4aa13b8a863ef00cc3fe8e1db2
- SHA1 85efb0c2e2b8296add4b12f60f92d47efe6eaf89
- SHA512 1867a2e94e0c4b31f8e36da16e533f2036449a47acf8ad795ba5ca802fef7435c47043a71047c60b93f1841a48da6217cee3fa1306482524bddc72ea7d080b18
- SSDEEP 1536:X77m8Hbh3MuV/yhNS0AtduXjTweRYdiXE4MSiGqsVLs6xt1Lii:XPXquOQ0YduzTZYgTMSNfYA1Lii
- TLSH T15A430236C829ECC1CA92557A74E1412F5D948E78C3F3F3A65076698813FBD41BA32E52
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Behavioral task
behavioral1
Sample
wife.arm7
Resource
debian12-armhf-20260513-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target wife.arm7
- Size 55KB
- SHA256 ae6e8d633bbb941e3cfa16aa96be1b11534251e4b50cae5e86999a587b44dc38
- MD5 91036f4aa13b8a863ef00cc3fe8e1db2
- SHA1 85efb0c2e2b8296add4b12f60f92d47efe6eaf89
- SHA512 1867a2e94e0c4b31f8e36da16e533f2036449a47acf8ad795ba5ca802fef7435c47043a71047c60b93f1841a48da6217cee3fa1306482524bddc72ea7d080b18
- SSDEEP 1536:X77m8Hbh3MuV/yhNS0AtduXjTweRYdiXE4MSiGqsVLs6xt1Lii:XPXquOQ0YduzTZYgTMSNfYA1Lii
- TLSH T15A430236C829ECC1CA92557A74E1412F5D948E78C3F3F3A65076698813FBD41BA32E52
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10Enumerates running processes
Discovers information about currently running processes on the system
Reads process memory
Read the memory of a process through the /proc virtual filesystem. This can be used to steal credentials.