Analysis
- max time kernel
140s - max time network
144s - platform
debian-12_armhf - resource
debian12-armhf-20260513-en - resource tags
arch:armhfimage:debian12-armhf-20260513-enkernel:6.1.0-17-armmp-lpaelocale:en-usos:debian-12-armhfsystem - submitted
16/09/2026, 10:32
Behavioral task
behavioral1
Sample
m-6.8-k.Sakura.elf
Resource
debian12-armhf-20260513-en
2 signatures
150 seconds
General
- Target m-6.8-k.Sakura.elf
- Size 156KB
- Sample260916-mk2thayfpg
- SHA256 de013ccaf8e9dde5a5a166cbeecd2dba0ae2db3e334da779794fce3e628b6ce5
- MD5 b9dffc1ae3261f9472bac658c97628ce
- SHA1 f42caaa7e27f7bd4a6bbd89ea4f7be20097528e1
- SHA512 b3d9fb72e6dd6b8437d9da2d50b0dff1842c273cfe48e78f703ed48e759329ea04e21c4ba209649de720de2d42aa69c76a5d4760ea42e63da3db52d34c705e18
- SSDEEP 3072:T1g2/eINNlzx2kkQCMOaQcvBxYnyLRM/9q3tmFwfBxKQodn:hg2hNNlzIkk/MOa/3YnydM/9MmFwfBxE
- TLSH T1C3F34905E6408B57C1E2277AE6CF824D33338B94A3EB33155938ABF43FC27995E26915
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Malware Config
Signatures
- Reads system routing table 1 TTPs 1 IoCs
Gets active network interfaces from /proc virtual filesystem.
description ioc Process File opened for reading /proc/net/route m-6.8-k.Sakura.elf - Reads system network configuration 1 TTPs 1 IoCs
Uses contents of /proc filesystem to enumerate network settings.
description ioc Process File opened for reading /proc/net/route m-6.8-k.Sakura.elf