ee92614e5e2380c22018e29af743783a81188f865060ed28cacd6857c2b36d3f

Analysis

max time kernel
146s
max time network
149s
platform
debian-12_armhf
resource
debian12-armhf-20260513-en
resource tags

arch:armhfimage:debian12-armhf-20260513-enkernel:6.1.0-17-armmp-lpaelocale:en-usos:debian-12-armhfsystem
submitted
10/08/2026, 05:37

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
pid.ar.elf
Size 365KB
Sample260810-gbe1gsec78
SHA256 ee92614e5e2380c22018e29af743783a81188f865060ed28cacd6857c2b36d3f
MD5 28f94d792537bb68a5f8c51b02911b0a
SHA1 79ee7ac5d8d19818721d2fc4400ab0cde981ef0a
SHA512 09be9d88581f284a21749f253fb6c601571ab3e0656c1b6290529ffc20fa7301a0b83dc62d79be4a8925ec15c9b4573eabb531a902f0acba89f7422b8439e4ed
SSDEEP 6144:Ga9za9Aa9iG028/apHgRJhpsallftd89gC1Q/Eth:Ga9za9Aa9if2bHgfhBXtJC1F
TLSH
T14084EB8CB5E2E2CAD1D4EAB5B31D784937530736B1D73146A51EEA3313EF19809BDA20
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

antivm discovery

Malware Config

Signatures

Changes its process name 1 IoCs

description	ioc	pid	Process
Changes the process name, possibly in an attempt to hide itself	cron	791	pid.ar.elf

Checks CPU configuration 1 TTPs 1 IoCs

Checks CPU information which indicate if the system is a virtual machine.

antivm

System Checks

T1497.001

description	ioc	Process
File opened for reading	/proc/cpuinfo	pid.ar.elf

Reads runtime system information 1 IoCs

Reads data from /proc virtual filesystem.

discovery

description	ioc	Process
File opened for reading	/proc/uptime	pid.ar.elf

/tmp/pid.ar.elf
/tmp/pid.ar.elf
1⤵
- Changes its process name
- Checks CPU configuration
- Reads runtime system information
PID:791

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1497

System Checks

T1497.001

Credential Access

Discovery

Virtualization/Sandbox Evasion

T1497

System Checks

T1497.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads