General
- Target raul.armv7l.elf
- Size 118KB
- Sample260824-egycxacn5w
- SHA256 30d0f4479b7223afa3e6679b6261e68685f25ef5127e00f596b946fc9518bc78
- MD5 23c86005938a365aa13f47c757508f83
- SHA1 a9c5f0ad4c68fb785f6936f2b2223ae88c9c1b6c
- SHA512 6291ae1b024b83eff453ae2c57969446c2ca7ea4141cc85e13ecb6ca7dd5c04aa79e83594b444463fdf243482aa0f22f1cd3c164a759530a18a5c04ca3e053fc
- SSDEEP 3072:LDpGyGD7lHLbdRkRc2h8kRRUoooLMIi/1CtPyL0YDIL6a9/:Lc8Rclk7UoooLHitYPyL0Y8L6K/
- TLSH T1B8C32B46BD81DF02C1D625B6FA9E548D33136FF8D3FA3015CC216FA0678698B0E7A612
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
Behavioral task
behavioral1
Sample
raul.armv7l.elf
Resource
debian12-armhf-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target raul.armv7l.elf
- Size 118KB
- SHA256 30d0f4479b7223afa3e6679b6261e68685f25ef5127e00f596b946fc9518bc78
- MD5 23c86005938a365aa13f47c757508f83
- SHA1 a9c5f0ad4c68fb785f6936f2b2223ae88c9c1b6c
- SHA512 6291ae1b024b83eff453ae2c57969446c2ca7ea4141cc85e13ecb6ca7dd5c04aa79e83594b444463fdf243482aa0f22f1cd3c164a759530a18a5c04ca3e053fc
- SSDEEP 3072:LDpGyGD7lHLbdRkRc2h8kRRUoooLMIi/1CtPyL0YDIL6a9/:Lc8Rclk7UoooLHitYPyL0Y8L6K/
- TLSH T1B8C32B46BD81DF02C1D625B6FA9E548D33136FF8D3FA3015CC216FA0678698B0E7A612
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Renames itself
-
Enumerates running processes
Discovers information about currently running processes on the system
-
Reads MAC address of network interface
Fetches the MAC address of active network interfaces. May be used to detect known values for hypervisors.
-
Reads network interface configuration
Fetches information about one or more active network interfaces.