General
- Target 864f4303aaa1c6f5.bin.elf
- Size 990KB
- Sample260930-ldsrkswcne
- SHA256 864f4303aaa1c6f53880eadd3a6de114656f3bde631a55602516344beb58c1bb
- MD5 9523261127eb543dd25564c4e75a60ae
- SHA1 d44a9363ef95cc2e6ebd6f499ee5a795c00c93ac
- SHA512 a9303e6f7a0fc13572e772fb5c32eb473a9eb5d6b70c6b2a0eff5c70f9cf2f7cf6495cfc40410791e608da1561d16b69ef581134b7f26391690236bea4a8ce2b
- SSDEEP 24576:+WmNVQHYP+SmAC+MqR9p4Wrii7j657yD/hGnm+:KdM4DmUj657yDAm+
- TLSH T128254C55F890DF63C9C46B7AFA5E82A833234778C3D7720699148B343B97A1F0B3A645
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
Behavioral task
behavioral1
Sample
864f4303aaa1c6f5.bin.elf
Resource
debian12-armhf-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 864f4303aaa1c6f5.bin.elf
- Size 990KB
- SHA256 864f4303aaa1c6f53880eadd3a6de114656f3bde631a55602516344beb58c1bb
- MD5 9523261127eb543dd25564c4e75a60ae
- SHA1 d44a9363ef95cc2e6ebd6f499ee5a795c00c93ac
- SHA512 a9303e6f7a0fc13572e772fb5c32eb473a9eb5d6b70c6b2a0eff5c70f9cf2f7cf6495cfc40410791e608da1561d16b69ef581134b7f26391690236bea4a8ce2b
- SSDEEP 24576:+WmNVQHYP+SmAC+MqR9p4Wrii7j657yD/hGnm+:KdM4DmUj657yDAm+
- TLSH T128254C55F890DF63C9C46B7AFA5E82A833234778C3D7720699148B343B97A1F0B3A645
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
File and Directory Permissions Modification
Adversaries may modify file or directory permissions to evade defenses.
-
Checks hardware identifiers (DMI)
Checks DMI information which indicate if the system is a virtual machine.
-
Enumerates running processes
Discovers information about currently running processes on the system
-
Reads MAC address of network interface
Fetches the MAC address of active network interfaces. May be used to detect known values for hypervisors.
MITRE ATT&CK Enterprise v16
Defense Evasion
File and Directory Permissions Modification
1Linux and Mac File and Directory Permissions Modification
1Virtualization/Sandbox Evasion
2System Checks
2