Analysis
- max time kernel
140s - max time network
150s - platform
debian-12_armhf - resource
debian12-armhf-20260513-en - resource tags
arch:armhfimage:debian12-armhf-20260513-enkernel:6.1.0-17-armmp-lpaelocale:en-usos:debian-12-armhfsystem - submitted
11/11/2026, 06:47
Behavioral task
behavioral1
Sample
a-r.m-6.Sakura.elf
Resource
debian12-armhf-20260513-en
2 signatures
150 seconds
General
- Target a-r.m-6.Sakura.elf
- Size 118KB
- Sample261111-hkab2afb85
- SHA256 25cb9fe0947855e8d0238059d2d57fc440437cb9db27d63522e1bb60f9d3db9a
- MD5 5db5ffa61cf618de02c475b23c5dbb1d
- SHA1 3471dfb15342b999f670937d950d1454546ddf3a
- SHA512 f87c5eef6a4e2d23f1b38c806240389cfb79980d8296c0535d530b410e1f5c1e3e6551481c0d21c303e1e0ee65e64c6720f4a06510691294f379a7739ec3ae58
- SSDEEP 3072:/wl4DjCN6YnM88EjDaltWTALDqsiM+mTQOY5NX3cn:K4D+N6Y7NjDauALDlN+mTQOY5R3cn
- TLSH T181C31805D5508767C2D3237AEB8E865D37325BA4A3DB33215A34BFB42FC27891E39921
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Malware Config
Signatures
- Reads system routing table 1 TTPs 1 IoCs
Gets active network interfaces from /proc virtual filesystem.
description ioc Process File opened for reading /proc/net/route a-r.m-6.Sakura.elf - Reads system network configuration 1 TTPs 1 IoCs
Uses contents of /proc filesystem to enumerate network settings.
description ioc Process File opened for reading /proc/net/route a-r.m-6.Sakura.elf