Analysis
- max time kernel
0s - max time network
140s - platform
debian-12_armhf - resource
debian12-armhf-20260513-en - resource tags
arch:armhfimage:debian12-armhf-20260513-enkernel:6.1.0-17-armmp-lpaelocale:en-usos:debian-12-armhfsystem - submitted
07/10/2026, 16:50
Static task
static1
Behavioral task
behavioral1
Sample
dlr.arm7.elf
Resource
debian12-armhf-20260513-en
1 signatures
150 seconds
General
- Target dlr.arm7.elf
- Size 1KB
- Sample261007-vch1esds2k
- SHA256 e97d800f769284cea76fef951df360a5be60f820a8a5af4a77447b441ee8620e
- MD5 16104cbf51b3cffaa5151f67f7447ad6
- SHA1 78c6b71e7eb829a09780efc7c3e8145d3f95fae2
- SHA512 858575d5e945d3d179ac23e9912b4243e27822a4649c04786a59db8079c17a76c1a763ceca0d5d28484b835513744a3fd08db6484cda206b58b8675bf631f69d
- TLSH T19431DFD5A3D05DBDC8E411BEAE6B430473689F80F1C67523821C67586D1EF785D26486
- MD5 SHA1 SHA512 TLSH
Score
3/10
Malware Config
Signatures
- Writes file to tmp directory 1 IoCs
Malware often drops required files in the /tmp directory.
description ioc Process File opened for modification /tmp/ccAD dlr.arm7.elf
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /tmp/ccAD
- Size 178B
- SHA256 887c8ada6058f01125a5131f1c495ba5f0171b2c40466ea824494403b87c1a22
- MD5 7e2c427186d4e1bac52813383423e82e
- SHA1 bdede1efdd02eec3e5ee34eb555e44227d2bb2f1
- SHA512 09fa2c8d7d9a732abe7f118bfa20c1b7c47bec9b40e221366dae05bd01811f029d85544ff35b517e54faaf4b35a672e50e5fca232460fe3c0844132bdf0c818d
- TLSH T11EC0805D6513FD4DC653217536C3A580C19B93A7E5E945114580515370CB15946C6396
- MD5 SHA1 SHA512 TLSH