General
- Target qzxuuppn.arm.elf
- Size 989KB
- Sample260924-2jf8qstdpg
- SHA256 b20d7010028444ca78e42cd69326c4ca66b40d41dd2993e626ee62b409712387
- MD5 fb55786492faf51b8eb02abca079bc62
- SHA1 732e2993763a3cd194598b40596db9d64e574fdc
- SHA512 6192c2d193ce86b337577ff5780e564cf3d4f3ff622e1a36835b56c87d678631e0614d781a93bf5162deffec41cfafcd49b5d094a466cf75836d7cbbc86cdadb
- SSDEEP 24576:0njsG7Gt/l3w+85fEylUkz09sXbU6k7hU/hGnJM:0La/mbUYA6U6k7hUAJM
- TLSH T1D1253B54F8909F63C5D46B7AF65E82A833234779C3E7720699148B383BD7A1F0B3A641
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
Behavioral task
behavioral1
Sample
qzxuuppn.arm.elf
Resource
debian12-armhf-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target qzxuuppn.arm.elf
- Size 989KB
- SHA256 b20d7010028444ca78e42cd69326c4ca66b40d41dd2993e626ee62b409712387
- MD5 fb55786492faf51b8eb02abca079bc62
- SHA1 732e2993763a3cd194598b40596db9d64e574fdc
- SHA512 6192c2d193ce86b337577ff5780e564cf3d4f3ff622e1a36835b56c87d678631e0614d781a93bf5162deffec41cfafcd49b5d094a466cf75836d7cbbc86cdadb
- SSDEEP 24576:0njsG7Gt/l3w+85fEylUkz09sXbU6k7hU/hGnJM:0La/mbUYA6U6k7hUAJM
- TLSH T1D1253B54F8909F63C5D46B7AF65E82A833234779C3E7720699148B383BD7A1F0B3A641
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
File and Directory Permissions Modification
Adversaries may modify file or directory permissions to evade defenses.
-
Checks hardware identifiers (DMI)
Checks DMI information which indicate if the system is a virtual machine.
-
Enumerates running processes
Discovers information about currently running processes on the system
-
Reads MAC address of network interface
Fetches the MAC address of active network interfaces. May be used to detect known values for hypervisors.
MITRE ATT&CK Enterprise v16
Defense Evasion
File and Directory Permissions Modification
1Linux and Mac File and Directory Permissions Modification
1Virtualization/Sandbox Evasion
2System Checks
2