General
- Target mnkk.elf
- Size 109KB
- Sample260701-mhdc5ady7z
- SHA256 9377d9f02a48345858ba2ad213de0e42a6919b7ceb0101b25083cbb61f3ad641
- MD5 e478ef8a5e33fc4da5a403ea37a3c0a2
- SHA1 00bfcc3e0570e1af497f48b8138489cfbdadb39e
- SHA512 50d02c04032d03815223c9d6c6c52184677b643298767471db74edee98e87b2e87e8224d89ad1460b0d3d03fb28115f89a75ddd8ebc36896c27ae32c0e7d403f
- SSDEEP 3072:hEg6sCEqe4s1aVCV64WWrS1WP+ca/5MsCfhlHwWBT+3qz0eo:hEbsCEqe48aVo64WWrSwP+ca0sc
- TLSH T13EB3395AB8816F52D4D6257AFF1E534933531BACE3EE7102F9146B2C338A91B4F3A502
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
Behavioral task
behavioral1
Sample
mnkk.elf
Resource
debian12-armhf-20260513-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target mnkk.elf
- Size 109KB
- SHA256 9377d9f02a48345858ba2ad213de0e42a6919b7ceb0101b25083cbb61f3ad641
- MD5 e478ef8a5e33fc4da5a403ea37a3c0a2
- SHA1 00bfcc3e0570e1af497f48b8138489cfbdadb39e
- SHA512 50d02c04032d03815223c9d6c6c52184677b643298767471db74edee98e87b2e87e8224d89ad1460b0d3d03fb28115f89a75ddd8ebc36896c27ae32c0e7d403f
- SSDEEP 3072:hEg6sCEqe4s1aVCV64WWrS1WP+ca/5MsCfhlHwWBT+3qz0eo:hEbsCEqe48aVo64WWrSwP+ca0sc
- TLSH T13EB3395AB8816F52D4D6257AFF1E534933531BACE3EE7102F9146B2C338A91B4F3A502
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Deletes itself
-
Enumerates running processes
Discovers information about currently running processes on the system
-
Reads hardware information
Accesses system info like serial numbers, manufacturer names etc.
-
Reads list of loaded kernel modules
Reads the list of currently loaded kernel modules, possibly to detect virtual environments.