Analysis
- max time kernel
144s - max time network
147s - platform
debian-12_armhf - resource
debian12-armhf-20260513-en - resource tags
arch:armhfimage:debian12-armhf-20260513-enkernel:6.1.0-17-armmp-lpaelocale:en-usos:debian-12-armhfsystem - submitted
28/06/2026, 03:30
Behavioral task
behavioral1
Sample
m-6.8-k.Sakura.elf
Resource
debian12-armhf-20260513-en
2 signatures
150 seconds
General
- Target m-6.8-k.Sakura.elf
- Size 172KB
- Sample260628-d2vxvaez71
- SHA256 e7730ccf5bfcb40df1c54f1600cdee4c0c56cb88fdcc6ae9c338d36a1a7f994d
- MD5 ffc3f4db19d7755835d1b7773734d913
- SHA1 3b00f0622a660d8daea4ef156057a756187a687a
- SHA512 f65de394073c1657d3942c799a3dd624fc15204401b3d1a46f40e8de307de7e4563ebf18cde5ef315d0b13b7326f52ebdd30e231cae64367a3b2c4204e3ef4d4
- SSDEEP 3072:Z5adk1Iab0TLjD7E9J0IrvakiGYL/Ckh7sDFVTmiw5BniQlgA:Z5adiIab0TLj3ElukiGYL/Cvmiw5Bn5p
- TLSH T11E042A04E6404B57C2E227BAF7CB424D33339B94A3DB33159938ABB43FC27995E26525
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Malware Config
Signatures
- Reads system routing table 1 TTPs 1 IoCs
Gets active network interfaces from /proc virtual filesystem.
description ioc Process File opened for reading /proc/net/route m-6.8-k.Sakura.elf - Reads system network configuration 1 TTPs 1 IoCs
Uses contents of /proc filesystem to enumerate network settings.
description ioc Process File opened for reading /proc/net/route m-6.8-k.Sakura.elf