General
- Target qzxuuppn.armv6.elf
- Size 990KB
- Sample260924-w9rt9stygv
- SHA256 f48fb1a8d653402c5d6b6cfdf58c6fd62b0d4d5cc566f196b2229d91acbf0757
- MD5 f97c94732ae55f8b0499466642816c47
- SHA1 b178dbd2594a0b304fea21a61cb16b3284dc8986
- SHA512 babb2d8dc3917560d451108750d6a63a2e4cd63947ab5351899a2462b613bc1ffd914e11c74c86416308a11a6e8ffefdd5582de417dc1cc2e9d557aaa4a366a4
- SSDEEP 24576:0njsG7Gt/l3w+85fEylUkzp9sXbU6k7hU/hGnJH:0La/mbUYL6U6k7hUAJH
- TLSH T1DC253B54F8909F63C5D46B7AF65E82A833234779C3E7720699148B383BD7A1F0B3A641
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
Behavioral task
behavioral1
Sample
qzxuuppn.armv6.elf
Resource
debian12-armhf-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target qzxuuppn.armv6.elf
- Size 990KB
- SHA256 f48fb1a8d653402c5d6b6cfdf58c6fd62b0d4d5cc566f196b2229d91acbf0757
- MD5 f97c94732ae55f8b0499466642816c47
- SHA1 b178dbd2594a0b304fea21a61cb16b3284dc8986
- SHA512 babb2d8dc3917560d451108750d6a63a2e4cd63947ab5351899a2462b613bc1ffd914e11c74c86416308a11a6e8ffefdd5582de417dc1cc2e9d557aaa4a366a4
- SSDEEP 24576:0njsG7Gt/l3w+85fEylUkzp9sXbU6k7hU/hGnJH:0La/mbUYL6U6k7hUAJH
- TLSH T1DC253B54F8909F63C5D46B7AF65E82A833234779C3E7720699148B383BD7A1F0B3A641
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
File and Directory Permissions Modification
Adversaries may modify file or directory permissions to evade defenses.
-
Checks hardware identifiers (DMI)
Checks DMI information which indicate if the system is a virtual machine.
-
Enumerates running processes
Discovers information about currently running processes on the system
-
Reads MAC address of network interface
Fetches the MAC address of active network interfaces. May be used to detect known values for hypervisors.
MITRE ATT&CK Enterprise v16
Defense Evasion
File and Directory Permissions Modification
1Linux and Mac File and Directory Permissions Modification
1Virtualization/Sandbox Evasion
2System Checks
2