1ed260f151f5a5512047946a9c034e4845849a390331074f8af23c63ac8342d0

Analysis

max time kernel
121s
max time network
159s
platform
debian-12_armhf
resource
debian12-armhf-20260513-en
resource tags

arch:armhfimage:debian12-armhf-20260513-enkernel:6.1.0-17-armmp-lpaelocale:en-usos:debian-12-armhfsystem
submitted
29/10/2026, 21:51

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
lib/tgsou-go-linux-arm
Size 2.3MB
Sample261029-1qfp4stsct
SHA256 1ed260f151f5a5512047946a9c034e4845849a390331074f8af23c63ac8342d0
MD5 e506240b141dfcfa89db3a8c8e0f377f
SHA1 cdc17d918a2133a7155eb04285f1a7fbd0e58925
SHA512 32f1013db1cbe66663335c95145f61d9a39b9b7e765ea1f0989783623326f5f2a734ab9cf7aeb27abecde4c523ec2daac844aad2ee529509b9453f30158890f7
SSDEEP 49152:SJiaaTw2muAV/gHdqO2IJ6FpG6CMNPBrI8KIYFFrtZ1Wc8SIJNx1hxv:SJiaaTw2eV/gCFdzbrI8AFGSIJNNN
TLSH
T104B533C0DAE0F91CFF03D63FE9C4A6B6E5A08AD5673761F0352A2446A3E5ED41A0B435
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Enumerates kernel/hardware configuration 1 TTPs 1 IoCs

Reads contents of /sys virtual filesystem to enumerate system information.

discovery

System Information Discovery

T1082

description	ioc	Process
File opened for reading	/sys/kernel/mm/transparent_hugepage/hpage_pmd_size	tgsou-go-linux-arm

Reads runtime system information 3 IoCs

Reads data from /proc virtual filesystem.

discovery

description	ioc	Process
File opened for reading	/proc/self/exe	tgsou-go-linux-arm
File opened for reading	/proc/self/auxv	tgsou-go-linux-arm
File opened for reading	/proc/sys/net/core/somaxconn	tgsou-go-linux-arm

/tmp/lib/tgsou-go-linux-arm
/tmp/lib/tgsou-go-linux-arm
1⤵
- Enumerates kernel/hardware configuration
- Reads runtime system information
PID:794

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads