Overview

overview

1

Static

static

1

daemon

debian-12-armhf

engine.sh

debian-12-armhf

keybox_fetch.sh

debian-12-armhf

killpi.sh

debian-12-armhf

lib/arm64-...tor.so

debian-12-armhf

lib/arm64-...gen.so

debian-12-armhf

lib/arm64-...ect.so

debian-12-armhf

lib/arm64-...sor.so

debian-12-armhf

lib/armeab...tor.so

debian-12-armhf

1

lib/armeab...ect.so

debian-12-armhf

lib/armeab...sor.so

debian-12-armhf

lib/x86/li...tor.so

debian-12-armhf

lib/x86/libinject.so

debian-12-armhf

lib/x86/li...sor.so

debian-12-armhf

lib/x86_64...tor.so

debian-12-armhf

lib/x86_64...ect.so

debian-12-armhf

lib/x86_64...sor.so

debian-12-armhf

logcat_cleanup.sh

debian-12-armhf

migrate.sh

debian-12-armhf

1

pif_native_fetch.sh

debian-12-armhf

post-fs-data.sh

debian-12-armhf

prop_unify.sh

debian-12-armhf

rom_spoof_block.sh

debian-12-armhf

service.sh

debian-12-armhf

status_fetch.sh

debian-12-armhf

sync_patch.sh

debian-12-armhf

uninstall.sh

debian-12-armhf

webroot/index.html

debian-12-armhf

zygisk/arm64-v8a.so

debian-12-armhf

zygisk/armeabi-v7a.so

debian-12-armhf

1

zygisk/x86.so

debian-12-armhf

zygisk/x86_64.so

debian-12-armhf

Analysis

  • max time kernel
    0s
  • max time network
    4s
  • platform
    debian-12_armhf
  • resource
    debian12-armhf-20260513-en
  • resource tags

    arch:armhfimage:debian12-armhf-20260513-enkernel:6.1.0-17-armmp-lpaelocale:en-usos:debian-12-armhfsystem
  • submitted
    28/08/2026, 04:15

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

Errors

Reason
Payload did not run: elf interpreter '/system/bin/sh' not found

General

  • Target
    logcat_cleanup.sh
  • Size 2KB
  • Sample260828-evmtbssxht
  • SHA256 26df56ff4f043ad62b9db77945acc901dce7afcc2d1a082579947d2d3385ce10
  • MD5 SHA1 SHA512 TLSH
Score
1/10

Malware Config

Signatures

Processes

  • /tmp/logcat_cleanup.sh
    /tmp/logcat_cleanup.sh
    1⤵
      PID:796

    Network

          MITRE ATT&CK Matrix

          Replay Monitor

          Loading Replay Monitor...

          Downloads