Analysis
- max time kernel
149s - max time network
152s - platform
debian-12_armhf - resource
debian12-armhf-20260513-en - resource tags
- submitted
01/11/2026, 16:58
General
- Target yaniatbisb.duckdns.org_sample.bin
- Size 319KB
- Sample261101-vg4spacf79
- SHA256 b9b317eb01c0ee917a3dc4e875d87c0993d3bc3ed866790cebeb5af0fb6e178c
Score
7/10
Malware Config
Signatures
- Deletes itself 1 IoCs
- Traces itself 2 IoCs
Traces itself to prevent debugging attempts
- Changes its process name 1 IoCs
- Writes file to tmp directory 1 IoCs
Malware often drops required files in the /tmp directory.
Processes
-
/tmp/yaniatbisb.duckdns.org_sample.bin/tmp/yaniatbisb.duckdns.org_sample.bin1⤵
- Deletes itself
- Traces itself
- Changes its process name
- Writes file to tmp directory