Analysis
- max time kernel
140s - max time network
142s - platform
debian-12_armhf - resource
debian12-armhf-20260513-en - resource tags
arch:armhfimage:debian12-armhf-20260513-enkernel:6.1.0-17-armmp-lpaelocale:en-usos:debian-12-armhfsystem - submitted
20/10/2026, 16:05
Static task
static1
General
- Target arm7.elf
- Size 384KB
- Sample261020-tjnc2scc39
- SHA256 23b2bee6d808e7d3caf0e3e6f51e10d470f4cf298766c87f2062a4121dfb0d19
- MD5 d1141efdf1209752dfe8f5087a826809
- SHA1 ed5c5bd6ca2fb3e291da69ed42d886fe821dad3e
- SHA512 afbd4135e08f9fe9729f9bccdc7da433615ffed15510175db7bc3acbd616413e39e04996105ac61a9f78bca26371289c3a5cfe08e949b5a2afcfe61bd7a2fcbf
- SSDEEP 6144:+iPD4g1Q0Hv7dVLsW3ZFxfug/Z1Z7XsHVmrqqQIOeo7w+x6HIZWUGZGCa9b:74WQW7r3Bhs1MqP96oQ3a9b
- TLSH T1D2841A88E1F0E7DAD2D4AA75B319790D3B230736B1D73146A519EE3323EB1490AFD921
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Checks CPU configuration 1 TTPs 1 IoCs
Checks CPU information which indicate if the system is a virtual machine.
description ioc Process File opened for reading /proc/cpuinfo arm7.elf -
description ioc Process File opened for reading /proc/self/exe arm7.elf File opened for reading /proc/uptime arm7.elf