General
- Target xdzlewkx.armv7.elf
- Size 990KB
- Sample260924-2jd4datdpe
- SHA256 0f519b9347f0956a4d251873bf70235eb76d0260a8d6ba9289bf5faed84039c1
- MD5 a036cfdcd7a8c8c49630a6178f33e4be
- SHA1 a2a6a14a4275de6074816d48769975d5b8d28bc6
- SHA512 36411373c25037903cb872b89dbce209e1ce3a471b7d8875cd7d309907bdddf13a00eb4ad27d2517ba500ba1874a32cad9447f9cd81496a3964c432c80f6eb28
- SSDEEP 24576:0njsG7Gt/l3w+85fEylUkz09sXbU6k7hU/hGnJj:0La/mbUYA6U6k7hUAJj
- TLSH T1B1254B55F8909F63C5D46B7AF65E82A833234778C3E7720699148B383BD7A1F0B3A641
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
Behavioral task
behavioral1
Sample
xdzlewkx.armv7.elf
Resource
debian12-armhf-20260127-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target xdzlewkx.armv7.elf
- Size 990KB
- SHA256 0f519b9347f0956a4d251873bf70235eb76d0260a8d6ba9289bf5faed84039c1
- MD5 a036cfdcd7a8c8c49630a6178f33e4be
- SHA1 a2a6a14a4275de6074816d48769975d5b8d28bc6
- SHA512 36411373c25037903cb872b89dbce209e1ce3a471b7d8875cd7d309907bdddf13a00eb4ad27d2517ba500ba1874a32cad9447f9cd81496a3964c432c80f6eb28
- SSDEEP 24576:0njsG7Gt/l3w+85fEylUkz09sXbU6k7hU/hGnJj:0La/mbUYA6U6k7hUAJj
- TLSH T1B1254B55F8909F63C5D46B7AF65E82A833234778C3E7720699148B383BD7A1F0B3A641
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
File and Directory Permissions Modification
Adversaries may modify file or directory permissions to evade defenses.
-
Checks hardware identifiers (DMI)
Checks DMI information which indicate if the system is a virtual machine.
-
Enumerates running processes
Discovers information about currently running processes on the system
-
Reads MAC address of network interface
Fetches the MAC address of active network interfaces. May be used to detect known values for hypervisors.
MITRE ATT&CK Enterprise v16
Defense Evasion
File and Directory Permissions Modification
1Linux and Mac File and Directory Permissions Modification
1Virtualization/Sandbox Evasion
2System Checks
2