Analysis
- max time kernel
0s - platform
debian-9_armhf - resource
debian9-armhf-20260513-en - resource tags
arch:armhfimage:debian9-armhf-20260513-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem - submitted
02/11/2026, 22:46
Static task
static1
Behavioral task
behavioral1
Sample
RTB.py
Resource
ubuntu1804-amd64-20261019-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
RTB.py
Resource
debian9-armhf-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral3
Sample
RTB.py
Resource
debian9-mipsbe-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral4
Sample
RTB.py
Resource
debian9-mipsel-20260513-en
1 signatures
150 seconds
General
- Target RTB.py
- Size 214KB
- Sample261102-2p931agd97
- SHA256 92444e1b355be58b2fdbeafa5fb63244336d8b01d88eb1937fb51ff58873c374
- MD5 bd8d852ed471ebb8ee9453c234cac462
- SHA1 cb6e11a6057aeb9a2397c841d4d79df66f01f85b
- SHA512 374b175dc571afaa2806ef8fe120383b581cca7a48637630028ae236e90d263a37d815b6143cea4a2fa35ee795de8ae68ed7254b343153e8017ee8f12f245b13
- SSDEEP 3072:Ht8hcqf1xD1z57ty/z7KkbDIKEd7bZM06LFmOUibpxhlMrTWP6nu035NbCF3MV1P:Ht0zIKyKHoN1zkhx
- TLSH T1E824E812EE260632D3A7A41D9C86C061279BF81B56252170F8DCC1892FA553ED17FBFE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
-
pid Process 639 python3 639 python3 639 python3 639 python3
Processes
-
/tmp/RTB.py/tmp/RTB.py1⤵PID:639
-
/usr/local/sbin/python3python3 /tmp/RTB.py1⤵
- Command and Scripting Interpreter: Python
PID:639
-
/usr/local/bin/python3python3 /tmp/RTB.py1⤵
- Command and Scripting Interpreter: Python
PID:639
-
/usr/sbin/python3python3 /tmp/RTB.py1⤵
- Command and Scripting Interpreter: Python
PID:639
-
/usr/bin/python3python3 /tmp/RTB.py1⤵
- Command and Scripting Interpreter: Python
PID:639