General
- Target lul.arm6
- Size 85KB
- Sample260806-psdsravyfw
- SHA256 e7a04b15aaf8b43f5bfd55fc8befac199b0b43db1befdd420f732eaff6f5923a
- MD5 337d764a62e8b9ae3c1d0ab58432161e
- SHA1 ac21157f017f78c2aae771feb680b3a7ac917883
- SHA512 d7e9b34dc297cc032ba9054c771d64c650c128b0bd8d263b1416e3415f3519dd9520b583bb18f119bd21cb37fccaa4ad0a54da52ca363e57bb9a4dde326f986c
- SSDEEP 1536:udnzn1yCF1h1CMUAMgaUoi2YlxsKEt5vDK2oaamDtNOMQiDR9VWUi/hm57EM5MYn:un1yCbhkqaUoi2YlxsrTloaRR9VWUi/+
- TLSH T119832A5AB8829B15C5C5527EFE0E518E33231BBCE3DE72129E145B2177CB56B0E3B806
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
Behavioral task
behavioral1
Sample
lul.arm6
Resource
debian12-armhf-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target lul.arm6
- Size 85KB
- SHA256 e7a04b15aaf8b43f5bfd55fc8befac199b0b43db1befdd420f732eaff6f5923a
- MD5 337d764a62e8b9ae3c1d0ab58432161e
- SHA1 ac21157f017f78c2aae771feb680b3a7ac917883
- SHA512 d7e9b34dc297cc032ba9054c771d64c650c128b0bd8d263b1416e3415f3519dd9520b583bb18f119bd21cb37fccaa4ad0a54da52ca363e57bb9a4dde326f986c
- SSDEEP 1536:udnzn1yCF1h1CMUAMgaUoi2YlxsKEt5vDK2oaamDtNOMQiDR9VWUi/hm57EM5MYn:un1yCbhkqaUoi2YlxsrTloaRR9VWUi/+
- TLSH T119832A5AB8829B15C5C5527EFE0E518E33231BBCE3DE72129E145B2177CB56B0E3B806
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Renames itself
-
Enumerates running processes
Discovers information about currently running processes on the system
-
Reads MAC address of network interface
Fetches the MAC address of active network interfaces. May be used to detect known values for hypervisors.
-
Reads network interface configuration
Fetches information about one or more active network interfaces.