Analysis
- max time kernel
149s - max time network
153s - platform
debian-12_armhf - resource
debian12-armhf-20260513-en - resource tags
arch:armhfimage:debian12-armhf-20260513-enkernel:6.1.0-17-armmp-lpaelocale:en-usos:debian-12-armhfsystem - submitted
27/10/2026, 05:54
Behavioral task
behavioral1
Sample
m-6.8-k.UnkNET.elf
Resource
debian12-armhf-20260513-en
2 signatures
150 seconds
General
- Target m-6.8-k.UnkNET.elf
- Size 156KB
- Sample261027-gl11psyw4p
- SHA256 5c0c39f265c03b449feba975f5cb7c11ed989ff367124d5a4d48a9ce3181e55c
- MD5 4b116e91e667835bcd85368d431537ec
- SHA1 2ffda2bb0d33a9a265dd695a7b118c7c94c49d37
- SHA512 5a94229923694f89aa841e798bd20a38659c122f30791236c016d64a69a582f357e6fe1186d94d79a908630db54fcfde06ad3c577d485a89d4bd21b057079a14
- SSDEEP 3072:T1g2/eINNlzx2kkQCMOaQcvBBYnyLRM/9q3vmFwfBxKQodn:hg2hNNlzIkk/MOa/DYnydM/9CmFwfBxE
- TLSH T1F9F34905E6408B57C1E2277AE6CF824D33338B94A3EB33155938ABF43FC27995E26915
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Malware Config
Signatures
- Reads system routing table 1 TTPs 1 IoCs
Gets active network interfaces from /proc virtual filesystem.
description ioc Process File opened for reading /proc/net/route m-6.8-k.UnkNET.elf - Reads system network configuration 1 TTPs 1 IoCs
Uses contents of /proc filesystem to enumerate network settings.
description ioc Process File opened for reading /proc/net/route m-6.8-k.UnkNET.elf