Analysis
- max time kernel
136s - max time network
141s - platform
debian-12_mipsel - resource
debian12-mipsel-20260513-en - resource tags
arch:mipselimage:debian12-mipsel-20260513-enkernel:6.1.0-17-4kc-maltalocale:en-usos:debian-12-mipselsystem - submitted
12/08/2026, 04:31
Static task
static1
Behavioral task
behavioral1
Sample
2026-08-12_7915cb6c4aa49b2fa845878c3e4835e8_glassworm_helldown_hiatusrat
Resource
debian12-mipsel-20260513-en
2 signatures
150 seconds
General
- Target 2026-08-12_7915cb6c4aa49b2fa845878c3e4835e8_glassworm_helldown_hiatusrat
- Size 720KB
- Sample260812-e5tdvsvzdx
- SHA256 2af98f7dd22d5f23f8aa91e7082b77537f30e2091174226ec50178653e7bb408
- MD5 7915cb6c4aa49b2fa845878c3e4835e8
- SHA1 39953e7a76732c8320fcbd943f0c96f89f02fae9
- SHA512 54193438413fbbdf0f4ea9cc2e96a1d9375783f183a785e4faeb0d8949b3f16cfcdf1c8948c9367a5b6557a6f7244e7f7b5befbaffb83dc66c5a2f2495303d49
- SSDEEP 12288:ZozfcZ20u1JErYxzhX5jJ+cHdhJTbnD3dTMQRVf3C4n4ZBtc:ZOBT1JErYxzhXr+GnD3uQRlyfZB
- TLSH T168F46B4A9F640FEFE8ABCD301B6E831719ADAC4B52E47B7254BCC9047A5B2464BC345C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Malware Config
Signatures
- Deletes itself 1 IoCs
pid Process 803 2026-08-12_7915cb6c4aa49b2fa845878c3e4835e8_glassworm_helldown_hiatusrat - Changes its process name 1 IoCs
description ioc pid Process Changes the process name, possibly in an attempt to hide itself dropbear 803 2026-08-12_7915cb6c4aa49b2fa845878c3e4835e8_glassworm_helldown_hiatusrat
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /run/.dropbear.lock
- Size 4B
- SHA256 79331a73ff64b08024cdd0421b58d083067a10b9406944e060701eac615d5e17
- MD5 db41979dad076d704b2f1a0b0a9b5277
- SHA1 ac969d9a75f142b9bbb7c4a05741b72d12796574
- SHA512 21086146f976f5010b6a4b0575c4156aa7dafc2a86005ac86aea0ae58b89488abc265febde241b8dc379becba00f9a920717c3d10a287ded7b4eff88deca9416
- MD5 SHA1 SHA512