Analysis

  • max time kernel
    1666s
  • max time network
    152s
  • platform
    debian-9_armhf
  • resource
    debian9-armhf-20221111-en
  • resource tags

    arch:armhfimage:debian9-armhf-20221111-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem
  • submitted
    01-12-2022 00:19

General

  • Target

    50c2cfc58689d5655eff76f8e392cec0.elf

  • Size

    75KB

  • MD5

    50c2cfc58689d5655eff76f8e392cec0

  • SHA1

    40e12d0b2edc55f44f050d8df743bac4231ce199

  • SHA256

    69c7121587263bf8ec0d19fecc56a4b4ee6e1865acc9cc0d537296d7fafe71dc

  • SHA512

    9ecd533d78b34cf57d57ea8f70a372181a1cf0624c796d8ee6a5a186a8891bb76dcaf4e5df454ea65de4e4fb8a4c18a44e363d337ca0c941427a22e2f0efabca

  • SSDEEP

    1536:6+ngAY5vqg5boL5bm25BtA5XSA5E7dftcEnA5CaeeSEY6jNillfiNKuBfEw8rY7J:TY5ig5kL5y25zA5iA5EFO6A5CaeeSEkS

Score
5/10

Malware Config

Signatures

  • Reads runtime system information 3 IoCs

    Reads data from /proc virtual filesystem.

Processes

  • /tmp/50c2cfc58689d5655eff76f8e392cec0.elf
    /tmp/50c2cfc58689d5655eff76f8e392cec0.elf
    1⤵
      PID:359
    • /bin/sh
      /bin/sh -c "mkdir /t1ueny70ej/ && >/t1ueny70ej/t1ueny70ej && cd /t1ueny70ej/ >/dev/null"
      1⤵
        PID:362
        • /bin/mkdir
          mkdir /t1ueny70ej/
          2⤵
          • Reads runtime system information
          PID:363
      • /bin/sh
        /bin/sh -c "mv /tmp/50c2cfc58689d5655eff76f8e392cec0.elf /t1ueny70ej/t1ueny70ej && chmod 777 /t1ueny70ej/t1ueny70ej >/dev/null"
        1⤵
          PID:364
          • /bin/mv
            mv /tmp/50c2cfc58689d5655eff76f8e392cec0.elf /t1ueny70ej/t1ueny70ej
            2⤵
            • Reads runtime system information
            PID:365
          • /bin/chmod
            chmod 777 /t1ueny70ej/t1ueny70ej
            2⤵
              PID:372

          Network

          MITRE ATT&CK Matrix

          Replay Monitor

          Loading Replay Monitor...

          Downloads