General
- Target xpe.armv5l
- Size 113KB
- Sample260705-wt91xaey5y
- SHA256 d061fa045aed6e9dd60d373fdec2a273733bdafa4c6afa3870930807c065af2b
- MD5 db39f279867e875844561dda25339775
- SHA1 34784f13a86949a04889e49cca254148f259d780
- SHA512 0fcfb730783bd90c236493d716bddbec4eb8fa5c3a8ace36b995a507db34e64503fcfa5a19e9a228eae85de5a171e46995d6d007c77f7cf3da6e5649d9aeef5f
- SSDEEP 3072:3pmZqsbCaiGvl/A8B88UNSJOtYpYLAdn:3pmpbtvA8B88UN4+LAdn
- TLSH T183B30A69F880CB62C6C4267AFB5D828C33130B78D3D93102DE199F3567EB95A0F7A546
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
Behavioral task
behavioral1
Sample
xpe.armv5l
Resource
debian12-armhf-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target xpe.armv5l
- Size 113KB
- SHA256 d061fa045aed6e9dd60d373fdec2a273733bdafa4c6afa3870930807c065af2b
- MD5 db39f279867e875844561dda25339775
- SHA1 34784f13a86949a04889e49cca254148f259d780
- SHA512 0fcfb730783bd90c236493d716bddbec4eb8fa5c3a8ace36b995a507db34e64503fcfa5a19e9a228eae85de5a171e46995d6d007c77f7cf3da6e5649d9aeef5f
- SSDEEP 3072:3pmZqsbCaiGvl/A8B88UNSJOtYpYLAdn:3pmpbtvA8B88UN4+LAdn
- TLSH T183B30A69F880CB62C6C4267AFB5D828C33130B78D3D93102DE199F3567EB95A0F7A546
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Deletes itself
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Enumerates running processes
Discovers information about currently running processes on the system