Analysis
- user interaction
yes - max time kernel
147s - max time network
149s - platform
debian-9_armhf - resource
debian9-armhf-20260513-en - resource tags
- submitted
26/06/2026, 12:50
General
- Target jbd2_sda1d
- Size 1.7MB
- Sample260626-p3eg2act6j
- SHA256 43671ca3cb91483726ea1c3badf26d6ae7f04956acdacb0a7fe6b2842e4af26f
Score
3/10
Malware Config
Signatures
- Enumerates kernel/hardware configuration 1 TTPs 2 IoCs
Reads contents of /sys virtual filesystem to enumerate system information.
- Reads runtime system information 2 IoCs
Reads data from /proc virtual filesystem.
- Writes file to tmp directory 1 IoCs
Malware often drops required files in the /tmp directory.
Processes
-
/tmp/jbd2_sda1d/tmp/jbd2_sda1d1⤵
- Enumerates kernel/hardware configuration
- Reads runtime system information
- Writes file to tmp directory
-
/tmp/jbd2_sda1d/tmp/jbd2_sda1d2⤵
- Enumerates kernel/hardware configuration
- Reads runtime system information
-
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
3�aRƗ����{pz�61�BF��