Analysis

  • max time kernel
    133s
  • max time network
    151s
  • platform
    debian-12_armhf
  • resource
    debian12-armhf-20260513-en
  • resource tags

    arch:armhfimage:debian12-armhf-20260513-enkernel:6.1.0-17-armmp-lpaelocale:en-usos:debian-12-armhfsystem
  • submitted
    14/08/2026, 12:29

General

  • Target
    linux_arm5
  • Size 6.8MB
  • Sample260814-pn4hlsshqf
  • SHA256 81b62ed084960b77ced6210b582a75a7b5390ae6a51079d35eb5511a382425c1
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10

Malware Config

Signatures

  • Enumerates kernel/hardware configuration 1 TTPs 2 IoCs

    Reads contents of /sys virtual filesystem to enumerate system information.

  • Reads runtime system information 4 IoCs

    Reads data from /proc virtual filesystem.

Processes

  • /tmp/linux_arm5
    /tmp/linux_arm5
    1⤵
    • Enumerates kernel/hardware configuration
    • Reads runtime system information
    PID:784
    • /usr/bin/bash
      bash -c "mount -o bind /tmp/spoof /proc/784"
      2⤵
        PID:802
      • /usr/bin/mount
        mount -o bind /tmp/spoof /proc/784
        2⤵
        • Reads runtime system information
        PID:802

    Network

          MITRE ATT&CK Enterprise v16

          Replay Monitor

          Loading Replay Monitor...

          Downloads