Analysis
- max time kernel
149s - max time network
152s - platform
debian-9_armhf - resource
debian9-armhf-20260513-en - resource tags
- submitted
07/11/2026, 18:14
General
- Target 2f74f02feaf11dc7fc0623c8c47b2dabf5d0ad85776dabc8b4c7db9d8dce293d
- Size 9KB
- Sample261107-wvkgmsff34
- SHA256 2f74f02feaf11dc7fc0623c8c47b2dabf5d0ad85776dabc8b4c7db9d8dce293d
Score
8/10
Malware Config
Signatures
- Contacts a large (1027) amount of remote hosts 1 TTPs
This may indicate a network scan to discover remotely running services.
- File and Directory Permissions Modification 1 TTPs 1 IoCs
Adversaries may modify file or directory permissions to evade defenses.
- Deletes Audit logs 1 TTPs 1 IoCs
Deletes logs related to the Linux Audit framework.