General
- Target atjozltp.armv6l.elf
- Size 989KB
- Sample260924-3drb7asy2m
- SHA256 3acc7280d7e698eec41c5d9df0d4a6e31a96713cafd91c0ef4fd9daeeed6ca91
- MD5 a178aa84cb284ec41c5200ac75b3fe70
- SHA1 b731dd4f69804aa8873a01c8c73ab124fae92d46
- SHA512 bd4e7faff760f109290e9b61599bb31757fd6d7ab59fa31e3170afa6e2b795e5617a13c3d154ed20afa2a0fd7e0832f0b7de9a6e15e64fba701c579fc49d7cae
- SSDEEP 24576:0njsG7Gt/l3w+85fEylUkzs9sXbU6k7hU/hGnJX:0La/mbUYY6U6k7hUAJX
- TLSH T13C253B54F8909F63C5D46B7AF65E82A833234779C3E7720699148B383BD7A1F0B3A641
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
Behavioral task
behavioral1
Sample
atjozltp.armv6l.elf
Resource
debian12-armhf-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target atjozltp.armv6l.elf
- Size 989KB
- SHA256 3acc7280d7e698eec41c5d9df0d4a6e31a96713cafd91c0ef4fd9daeeed6ca91
- MD5 a178aa84cb284ec41c5200ac75b3fe70
- SHA1 b731dd4f69804aa8873a01c8c73ab124fae92d46
- SHA512 bd4e7faff760f109290e9b61599bb31757fd6d7ab59fa31e3170afa6e2b795e5617a13c3d154ed20afa2a0fd7e0832f0b7de9a6e15e64fba701c579fc49d7cae
- SSDEEP 24576:0njsG7Gt/l3w+85fEylUkzs9sXbU6k7hU/hGnJX:0La/mbUYY6U6k7hUAJX
- TLSH T13C253B54F8909F63C5D46B7AF65E82A833234779C3E7720699148B383BD7A1F0B3A641
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
File and Directory Permissions Modification
Adversaries may modify file or directory permissions to evade defenses.
-
Checks hardware identifiers (DMI)
Checks DMI information which indicate if the system is a virtual machine.
-
Enumerates running processes
Discovers information about currently running processes on the system
-
Reads MAC address of network interface
Fetches the MAC address of active network interfaces. May be used to detect known values for hypervisors.
MITRE ATT&CK Enterprise v16
Defense Evasion
File and Directory Permissions Modification
1Linux and Mac File and Directory Permissions Modification
1Virtualization/Sandbox Evasion
2System Checks
2