263b7939cd8af89303f2abae20e42312baff80ed659977427486c267ec77114f

Analysis

max time kernel
149s
max time network
154s
platform
debian-12_armhf
resource
debian12-armhf-20260513-en
resource tags

arch:armhfimage:debian12-armhf-20260513-enkernel:6.1.0-17-armmp-lpaelocale:en-usos:debian-12-armhfsystem
submitted
10/11/2026, 12:42

Target
f5ce482ff608d05bb2f19845b7bf6f4573ba6f426075df99fba024752e628b96.elf
Size 550KB
Sample261110-pxewlsfd72
SHA256 263b7939cd8af89303f2abae20e42312baff80ed659977427486c267ec77114f
MD5 a3fd85295b5839fc7c252671c9d9c16e
SHA1 9fdf75c0312559590558b7afe12c3bbf4045a399
SHA512 9c4a2d6dab16636257d7b9ff389cce3ebb908ae9e3ad924b8751ed8864592ee9aea3db07e851cb83b103ac338afb7b43108a7046ee8436f3c3db3eeba9b258d6
SSDEEP 12288:TOOyLDMjVTlmgOJEX8iyHgNL7I+U8IY5cWt6InbW0ajFy:nyUXXzvpNnbW0aj
TLSH
T1A5C41A66F950D722C6C426BABA5DC2AC33131FB4D6EA3001FD147F2827FA91E4B36651
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Contacts a large (1044) amount of remote hosts 1 TTPs
This may indicate a network scan to discover remotely running services.
discovery

Network Service Discovery
T1046

Deletes Audit logs 1 TTPs 1 IoCs

Deletes logs related to the Linux Audit framework.

Clear Linux or Mac System Logs

description	ioc	Process
File truncated	/var/log/audit/audit.log