Analysis

  • max time kernel
    0s
  • platform
    debian-9_armhf
  • resource
    debian9-armhf-20260513-en
  • resource tags

    arch:armhfimage:debian9-armhf-20260513-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem
  • submitted
    20/08/2026, 06:14

General

  • Target
    4b607154782f4d77b2d602904fbfd108d152f1f2b4795306b6236da8114503c8
  • Size 270KB
  • Sample260820-gzmega1cka
  • SHA256 4b607154782f4d77b2d602904fbfd108d152f1f2b4795306b6236da8114503c8
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

Processes

  • /tmp/4b607154782f4d77b2d602904fbfd108d152f1f2b4795306b6236da8114503c8
    /tmp/4b607154782f4d77b2d602904fbfd108d152f1f2b4795306b6236da8114503c8
    1⤵
      PID:652
    • /usr/local/sbin/sh
      sh /tmp/4b607154782f4d77b2d602904fbfd108d152f1f2b4795306b6236da8114503c8
      1⤵
        PID:652
      • /usr/local/bin/sh
        sh /tmp/4b607154782f4d77b2d602904fbfd108d152f1f2b4795306b6236da8114503c8
        1⤵
          PID:652
        • /usr/sbin/sh
          sh /tmp/4b607154782f4d77b2d602904fbfd108d152f1f2b4795306b6236da8114503c8
          1⤵
            PID:652
          • /usr/bin/sh
            sh /tmp/4b607154782f4d77b2d602904fbfd108d152f1f2b4795306b6236da8114503c8
            1⤵
              PID:652
            • /sbin/sh
              sh /tmp/4b607154782f4d77b2d602904fbfd108d152f1f2b4795306b6236da8114503c8
              1⤵
                PID:652
              • /bin/sh
                sh /tmp/4b607154782f4d77b2d602904fbfd108d152f1f2b4795306b6236da8114503c8
                1⤵
                  PID:652
                  • /usr/bin/tr
                    tr a-z A-Z
                    2⤵
                      PID:658
                    • /bin/egrep
                      egrep -o b
                      2⤵
                        PID:664
                      • /usr/local/sbin/grep
                        grep -E -o b
                        2⤵
                          PID:664
                        • /usr/local/bin/grep
                          grep -E -o b
                          2⤵
                            PID:664
                          • /usr/sbin/grep
                            grep -E -o b
                            2⤵
                              PID:664
                            • /usr/bin/grep
                              grep -E -o b
                              2⤵
                                PID:664
                              • /sbin/grep
                                grep -E -o b
                                2⤵
                                  PID:664
                                • /bin/grep
                                  grep -E -o b
                                  2⤵
                                    PID:664
                                  • /bin/readlink
                                    readlink -f /tmp/4b607154782f4d77b2d602904fbfd108d152f1f2b4795306b6236da8114503c8
                                    2⤵
                                      PID:680
                                    • /usr/bin/dirname
                                      dirname /tmp/4b607154782f4d77b2d602904fbfd108d152f1f2b4795306b6236da8114503c8
                                      2⤵
                                        PID:681
                                      • /usr/bin/tr
                                        tr -s /
                                        2⤵
                                          PID:687
                                        • /usr/bin/cut
                                          cut -d : -f 2
                                          2⤵
                                            PID:686
                                          • /usr/bin/cut
                                            cut -d / -f 2
                                            2⤵
                                              PID:688
                                            • /usr/bin/cut
                                              cut -d : -f 2-
                                              2⤵
                                                PID:692
                                              • /usr/bin/cut
                                                cut -d / -f 3-
                                                2⤵
                                                  PID:694
                                                • /usr/bin/tr
                                                  tr -s /
                                                  2⤵
                                                    PID:693

                                                Network

                                                      MITRE ATT&CK Matrix

                                                      Replay Monitor

                                                      Loading Replay Monitor...

                                                      Downloads