Analysis
- max time kernel
0s - max time network
145s - platform
debian-12_armhf - resource
debian12-armhf-20260513-en - resource tags
arch:armhfimage:debian12-armhf-20260513-enkernel:6.1.0-17-armmp-lpaelocale:en-usos:debian-12-armhfsystem - submitted
01/10/2026, 12:10
Static task
static1
Behavioral task
behavioral1
Sample
dlr.arm7.elf
Resource
debian12-armhf-20260513-en
1 signatures
150 seconds
General
- Target dlr.arm7.elf
- Size 1KB
- Sample261001-pb7phabd78
- SHA256 32a9892b9968c6acf561d371891ec53a54c22d0d30172ed2fd38fdfea4147a81
- MD5 931d528a687b39f6a8e2ca8ea79077d7
- SHA1 3c911bb50436976e0d44886bfcceb605512d8985
- SHA512 c8823d2b1ad85d988f1507259772180476e0d8ca9d11ba33303d1ac90062deb4a25617043f2bfe776b88b61123cca11663005c0352e71579859903f37bffcfcf
- TLSH T16331DF9066D05D7DC8F4E1BEEE5643107374AF80E0C7726396186728BD1AD7C6D27045
- MD5 SHA1 SHA512 TLSH
Score
3/10
Malware Config
Signatures
- Writes file to tmp directory 1 IoCs
Malware often drops required files in the /tmp directory.
description ioc Process File opened for modification /tmp/.misogynist dlr.arm7.elf
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /tmp/.misogynist
- Size 158KB
- SHA256 bc6854418c71d63e9209be6260fdc76517603fb9c1bdbcabb9858043207a418d
- MD5 28d5c2beeb93c2523182ace743a85bfa
- SHA1 26b60ae891cab9143f1f7445dac90e9172daa37a
- SHA512 60354429da196323ac1ea883bda69d7fe25599f9d2ab2e0230463bf357139f93a5b860c4e48b1a5556d59ec19f867603d02c579c8eceedc077c9915d054731ab
- SSDEEP 3072:ME/ssp2rG81f/AI3BiXhfrXrXXXqa0XgyoktL8nkazDJ1p9I2gNN:Mnbhf4Ix6Lrqa0XgyDtLSkaBH9I2g7
- TLSH T16CF3FA5AF890DE62C6D42A7AFA5D429C33530BB8C2D93106DD246F3432EB85F0B77646
- MD5 SHA1 SHA512 SSDEEP TLSH