Overview

overview

7

Static

static

1

lun

ubuntu-22.04-amd64

7

lun

debian-9-armhf

3

lun

debian-9-mips

lun

debian-9-mipsel

Analysis

  • max time kernel
    4s
  • platform
    debian-9_armhf
  • resource
    debian9-armhf-20260513-en
  • resource tags

    arch:armhfimage:debian9-armhf-20260513-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem
  • submitted
    19/07/2026, 04:16

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    lun
  • Size 352KB
  • Sample260719-evvtyabv7q
  • SHA256 0ee4f5ac150d4fca05884c6b8bb9ce00e8c70fe93d545262d1023ad491e1e089
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
discovery

Malware Config

Signatures

  • Reads runtime system information 1 IoCs

    Reads data from /proc virtual filesystem.

    discovery
  • Writes file to tmp directory 2 IoCs

    Malware often drops required files in the /tmp directory.

Processes

  • /bin/bash
    bash /tmp/lun
    1⤵
    • Reads runtime system information
    • Writes file to tmp directory
    PID:649
    • /bin/cat
      cat
      2⤵
        PID:677
      • /tmp/%
        "./%"
        2⤵
          PID:682
        • /bin/bash
          bash -c ";"
          2⤵
            PID:685
          • /usr/bin/python3
            python3 -
            2⤵
              PID:706

          Network

                MITRE ATT&CK Matrix

                Replay Monitor

                Loading Replay Monitor...

                Downloads

                sh-thd.kBNNPm
                • Path /tmp/sh-thd.kBNNPm
                • Size 28B
                • SHA256 162ceaf168c1e3efe73f14133eb126cabdecb805a961ea3e5ea9d855e47095a9
                • MD5 SHA1 SHA512
                Submit Download