Analysis
- max time kernel
20s - max time network
141s - platform
debian-12_armhf - resource
debian12-armhf-20260513-en - resource tags
arch:armhfimage:debian12-armhf-20260513-enkernel:6.1.0-17-armmp-lpaelocale:en-usos:debian-12-armhfsystem - submitted
07/10/2026, 01:57
Static task
static1
Behavioral task
behavioral1
Sample
dissarm7.elf
Resource
debian12-armhf-20260513-en
2 signatures
150 seconds
General
- Target dissarm7.elf
- Size 294KB
- Sample261007-cdfmksax41
- SHA256 8b3b5fcac17c2be4accd5c596d8b51184f39e6cf65ebcac939d02041cedf502e
- MD5 a2a83c03ac4a6c3ecf57f86cf0851ba7
- SHA1 ad611e5e12ac4fcb8db8cf73607b15b537ecc083
- SHA512 489b1c843986d26341d50db34a20adbcff4b533b1ff97682727fcd6a31ba4c912ca04ed1160dfc0a0b0778b398fe3eddf700c04127889864e26a441f5a79ba3f
- SSDEEP 6144:Bqxr1tJ0DPxH2eYMfDJRUarb1GQ1NjoayZRZPQm2aDkyV/GAwma2Egb72S:BqxEWPSDJRUarbz1NjNsZPQm7/imaNgZ
- TLSH T1D6542B08FE404F5BC1E237B9FB9F028A33339B58A7E7B20699245BB437C6B595E21115
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
4/10
Malware Config
Signatures
- Changes its process name 1 IoCs
description ioc pid Process Changes the process name, possibly in an attempt to hide itself [kworker/0:1] 789 dissarm7.elf -
description ioc Process File opened for reading /proc/stat dissarm7.elf
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /run/bot-10.127.0.70.lock
- Size 4B
- SHA256 d928266e89b1da2263838e86df3a430548ca1768bedbc9d4b20f9e370d5518df
- MD5 aa3f5bb8c988fa9b75a1cdb1dc4d93fc
- SHA1 cc4bba312861563053a8437e4986054961167de0
- SHA512 946f537d173ec9917845ba214393b0f8f4f4ebf7a69587753c044756ef79ef6152cc2d1a90c6f7d780f8b5dcd8775ee7e9f06aec8833b5efa3aecb78144575f7
- MD5 SHA1 SHA512