Analysis
- max time kernel
141s - max time network
145s - platform
debian-12_armhf - resource
debian12-armhf-20260127-en - resource tags
arch:armhfimage:debian12-armhf-20260127-enkernel:6.1.0-17-armmp-lpaelocale:en-usos:debian-12-armhfsystem - submitted
20/10/2026, 10:12
Static task
static1
General
- Target arm7.elf
- Size 387KB
- Sample261020-l8llraytev
- SHA256 630878253e5826676b2db848c60a204ffbbc0af5cb57e2f27e00a99e3c499c3f
- MD5 7ec4180cd731cef7884a475b1a919940
- SHA1 5c0d4ca0281ee244ede039931bb94c6142ecc1fd
- SHA512 f738302ab2fbc388aa1068c6b4a53d55596e9f8dfcda75c28a8b816c76595159a52fb86b1e35a29a4bc58d90c11f1227f327487d46656541d04464388f3bc34f
- SSDEEP 6144:udHkHgIjIk0aP+e/Fz3OyFxq0yu+lfwYBUuUeBIGJZlkw+xKeoIT9vWj1a9q:H7jbP/iZN3UqXSKefwa9q
- TLSH T18E840B88E1F0E7DAD2D4AA75B319790D3B230736B1D73146A519EE3323EB1490AFD921
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Checks CPU configuration 1 TTPs 1 IoCs
Checks CPU information which indicate if the system is a virtual machine.
description ioc Process File opened for reading /proc/cpuinfo arm7.elf -
description ioc Process File opened for reading /proc/self/exe arm7.elf File opened for reading /proc/uptime arm7.elf