b5ada6b6e0a59cb4ec5abe4dae7ddfb369f9a4c5e6b247062ca7cf33c4237553

Analysis

max time kernel
146s
max time network
149s
platform
debian-12_armhf
resource
debian12-armhf-20260127-en
resource tags

arch:armhfimage:debian12-armhf-20260127-enkernel:6.1.0-17-armmp-lpaelocale:en-usos:debian-12-armhfsystem
submitted
14/10/2026, 01:36

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
na.elf
Size 6.9MB
Sample261014-b1daasea78
SHA256 b5ada6b6e0a59cb4ec5abe4dae7ddfb369f9a4c5e6b247062ca7cf33c4237553
MD5 55d246dd41cb2dc0272192211836c0a1
SHA1 30097a9b857f489d011f07b672a15355cb1945a6
SHA512 e603598b83f101dbcca6a6faf7076cfb000820979d99ea0d02e3513708bf11147e92442288a0ba1d643efa09698edc4b370aba2f13eae9734d038411a04b8fe9
SSDEEP 49152:GPQZNaC6P0hmJoFWdRb+aouG753e0IwKpdXXKS5Dl5Ezz:M6NaC4mmJoFwRUO0hK7XXpbEn
TLSH
T17C760897B9D14942C4E43A77A8BE80C833A30EB99B9712275D05FE383EBE1D90E35754
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Enumerates kernel/hardware configuration 1 TTPs 2 IoCs

Reads contents of /sys virtual filesystem to enumerate system information.

discovery

System Information Discovery

T1082

description	ioc	Process
File opened for reading	/sys/kernel/mm/transparent_hugepage/hpage_pmd_size	na.elf
File opened for reading	/sys/fs/cgroup/system.slice/agent.service/cpu.max	na.elf

Reads runtime system information 2 IoCs

Reads data from /proc virtual filesystem.

discovery

description	ioc	Process
File opened for reading	/proc/self/cgroup	na.elf
File opened for reading	/proc/self/mountinfo	na.elf

/tmp/na.elf
/tmp/na.elf
1⤵
- Enumerates kernel/hardware configuration
- Reads runtime system information
PID:802

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads