Overview
overview
8Static
static
8install/doinst.sh
windows10-2004-x64
3install/doinst.sh
windows11-ltsc_2024-x64
3usr/bin/pear
ubuntu-18.04-amd64
1usr/bin/pear
debian-9-armhf
1usr/bin/pear
debian-9-mips
1usr/bin/pear
debian-9-mipsel
1usr/bin/peardev
ubuntu-18.04-amd64
1usr/bin/peardev
debian-9-armhf
1usr/bin/peardev
debian-9-mips
1usr/bin/peardev
debian-9-mipsel
usr/bin/pecl
ubuntu-18.04-amd64
1usr/bin/pecl
debian-9-armhf
1usr/bin/pecl
debian-9-mips
1usr/bin/pecl
debian-9-mipsel
1usr/bin/phar.phar
ubuntu-18.04-amd64
usr/bin/phar.phar
debian-9-armhf
usr/bin/phar.phar
debian-9-mips
usr/bin/phar.phar
debian-9-mipsel
usr/bin/php
ubuntu-18.04-amd64
usr/bin/php
debian-9-armhf
usr/bin/php
debian-9-mips
usr/bin/php
debian-9-mipsel
usr/bin/php-cgi
ubuntu-18.04-amd64
usr/bin/php-cgi
debian-9-armhf
usr/bin/php-cgi
debian-9-mips
usr/bin/php-cgi
debian-9-mipsel
usr/bin/phpdbg
ubuntu-18.04-amd64
usr/bin/phpdbg
debian-9-armhf
usr/bin/phpdbg
debian-9-mips
usr/bin/phpdbg
debian-9-mipsel
usr/bin/phpize
ubuntu-18.04-amd64
1usr/bin/phpize
debian-9-armhf
1Analysis
- max time kernel
0s - platform
debian-9_armhf - resource
debian9-armhf-20260513-en - resource tags
arch:armhfimage:debian9-armhf-20260513-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem - submitted
02/11/2026, 00:12
Behavioral task
behavioral1
Sample
install/doinst.sh
Resource
win10v2004-20260911-en
Behavioral task
behavioral2
Sample
install/doinst.sh
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral3
Sample
usr/bin/pear
Resource
ubuntu1804-amd64-20261019-en
Behavioral task
behavioral4
Sample
usr/bin/pear
Resource
debian9-armhf-20260513-en
Behavioral task
behavioral5
Sample
usr/bin/pear
Resource
debian9-mipsbe-20260513-en
Behavioral task
behavioral6
Sample
usr/bin/pear
Resource
debian9-mipsel-20260513-en
Behavioral task
behavioral7
Sample
usr/bin/peardev
Resource
ubuntu1804-amd64-20261019-en
Behavioral task
behavioral8
Sample
usr/bin/peardev
Resource
debian9-armhf-20260513-en
Behavioral task
behavioral9
Sample
usr/bin/peardev
Resource
debian9-mipsbe-20260513-en
Behavioral task
behavioral10
Sample
usr/bin/peardev
Resource
debian9-mipsel-20260513-en
Behavioral task
behavioral11
Sample
usr/bin/pecl
Resource
ubuntu1804-amd64-20261019-en
Behavioral task
behavioral12
Sample
usr/bin/pecl
Resource
debian9-armhf-20260513-en
Behavioral task
behavioral13
Sample
usr/bin/pecl
Resource
debian9-mipsbe-20260513-en
Behavioral task
behavioral14
Sample
usr/bin/pecl
Resource
debian9-mipsel-20260513-en
Behavioral task
behavioral15
Sample
usr/bin/phar.phar
Resource
ubuntu1804-amd64-20261019-en
Behavioral task
behavioral16
Sample
usr/bin/phar.phar
Resource
debian9-armhf-20260513-en
Behavioral task
behavioral17
Sample
usr/bin/phar.phar
Resource
debian9-mipsbe-20260513-en
Behavioral task
behavioral18
Sample
usr/bin/phar.phar
Resource
debian9-mipsel-20260513-en
Behavioral task
behavioral19
Sample
usr/bin/php
Resource
ubuntu1804-amd64-20261019-en
Behavioral task
behavioral20
Sample
usr/bin/php
Resource
debian9-armhf-20260513-en
Behavioral task
behavioral21
Sample
usr/bin/php
Resource
debian9-mipsbe-20260513-en
Behavioral task
behavioral22
Sample
usr/bin/php
Resource
debian9-mipsel-20260513-en
Behavioral task
behavioral23
Sample
usr/bin/php-cgi
Resource
ubuntu1804-amd64-20261019-en
Behavioral task
behavioral24
Sample
usr/bin/php-cgi
Resource
debian9-armhf-20260513-en
Behavioral task
behavioral25
Sample
usr/bin/php-cgi
Resource
debian9-mipsbe-20260513-en
Behavioral task
behavioral26
Sample
usr/bin/php-cgi
Resource
debian9-mipsel-20260513-en
Behavioral task
behavioral27
Sample
usr/bin/phpdbg
Resource
ubuntu1804-amd64-20261019-en
Behavioral task
behavioral28
Sample
usr/bin/phpdbg
Resource
debian9-armhf-20260513-en
Behavioral task
behavioral29
Sample
usr/bin/phpdbg
Resource
debian9-mipsbe-20260513-en
Behavioral task
behavioral30
Sample
usr/bin/phpdbg
Resource
debian9-mipsel-20260513-en
Behavioral task
behavioral31
Sample
usr/bin/phpize
Resource
ubuntu1804-amd64-20261019-en
Behavioral task
behavioral32
Sample
usr/bin/phpize
Resource
debian9-armhf-20260513-en
General
- Target usr/bin/peardev
- Size 814B
- Sample261102-ahlchsd17s
- SHA256 55b2b852a2f4c1f3302e13a6ab70d2fdd2b6605c41246395e4d798ec5e5795fa
- MD5 cee35f8347aa216add1e6b1b29bc4657
- SHA1 cf4cdf9167c2f630aad4fea09a7642fa6b505541
- SHA512 109dd12fddd251e3996e64de8b5ac59475acb95c6bfe51401fd702ebb4c7ae667f4b342d2d5e56569683920f45bbf7d095efd4c0e5b365fdb0253af11ca65d91
- TLSH T1E401AB59703C4E30CE7808F21073BDED0D64255F2E867C1073A882483266796E653B17
- MD5 SHA1 SHA512 TLSH
Malware Config
Signatures
Processes
-
/tmp/usr/bin/peardev/tmp/usr/bin/peardev1⤵PID:745
-
/usr/bin/php/usr/bin/php -d "date.timezone=UTC" -d "memory_limit=-1" -C -q -d "include_path=/usr/lib64/php" -d "output_buffering=1" -d "open_basedir=" -d "safe_mode=0" -d "register_argc_argv=On" -d "auto_prepend_file=" -d "variables_order=EGPCS" -d "auto_append_file=" /usr/lib64/php/pearcmd.php1⤵PID:745