4e9a6325a9e7cfb4b9f6597439c13ec31a5051830b90784a2c712f152f6d221a

Analysis

max time kernel
150s
max time network
152s
platform
debian-12_armhf
resource
debian12-armhf-20260513-en
resource tags

arch:armhfimage:debian12-armhf-20260513-enkernel:6.1.0-17-armmp-lpaelocale:en-usos:debian-12-armhfsystem
submitted
30/09/2026, 01:11

Target
arm7.elf
Size 143KB
Sample260930-bj4e6azzdv
SHA256 4e9a6325a9e7cfb4b9f6597439c13ec31a5051830b90784a2c712f152f6d221a
MD5 3987e50f66555966c00dbccfe7c702f7
SHA1 1fa6dba08bce7fb7acf42f61bcdae1002c296d09
SHA512 00934d05cfdb4dd595543c24dc8d058c41a5f0dcd02f26d5142ad88c5635c4af3e7720ee14511cebcd8a9578252e486e65a891df1aeb9aeedf14791afe6ac656
SSDEEP 3072:wb4FluQx/Jd2VLOpDtQxIby9kttq5EEnGupl/M/96Pd7q9:wkgQ0oDtQxIbOktt4EEGuphM/9q7q9
TLSH
T113E34B46FA408B17C4D62779BB9F438633239B64D7DB23068528AFB43F8679A4F63501
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery

Unexpected DNS network traffic destination 6 IoCs

Network traffic to other servers than the configured DNS servers was detected on the DNS port.

Changes its process name 1 IoCs

description	ioc	pid	Process
Changes the process name, possibly in an attempt to hide itself	/bin/bash	780	arm7.elf

Reads runtime system information 1 IoCs

Reads data from /proc virtual filesystem.

description	ioc	Process
File opened for reading	/proc/stat	arm7.elf