Analysis

  • max time kernel
    0s
  • platform
    debian-9_armhf
  • resource
    debian9-armhf-20260513-en
  • resource tags

    arch:armhfimage:debian9-armhf-20260513-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem
  • submitted
    05/09/2026, 00:13

General

  • Target
    vendor/bin/php-parse
  • Size 3KB
  • Sample260905-ah2phashnc
  • SHA256 15952ffcb27ebf657ceaba01ffdaf352698fbec39a009d041661d279d6633ba6
  • MD5 SHA1 SHA512 TLSH
Score
1/10

Malware Config

Signatures

Processes

  • /tmp/vendor/bin/php-parse
    /tmp/vendor/bin/php-parse
    1⤵
      PID:752
    • /usr/local/sbin/php
      php /tmp/vendor/bin/php-parse
      1⤵
        PID:752
      • /usr/local/bin/php
        php /tmp/vendor/bin/php-parse
        1⤵
          PID:752
        • /usr/sbin/php
          php /tmp/vendor/bin/php-parse
          1⤵
            PID:752
          • /usr/bin/php
            php /tmp/vendor/bin/php-parse
            1⤵
              PID:752
            • /sbin/php
              php /tmp/vendor/bin/php-parse
              1⤵
                PID:752
              • /bin/php
                php /tmp/vendor/bin/php-parse
                1⤵
                  PID:752

                Network

                      MITRE ATT&CK Matrix

                      Replay Monitor

                      Loading Replay Monitor...

                      Downloads