Analysis
-
max time kernel
1666s -
max time network
152s -
platform
debian-9_armhf -
resource
debian9-armhf-20221111-en -
resource tags
arch:armhfimage:debian9-armhf-20221111-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem -
submitted
01-12-2022 00:19
Static task
static1
Behavioral task
behavioral1
Sample
50c2cfc58689d5655eff76f8e392cec0.elf
Resource
debian9-armhf-20221111-en
debian-9-armhf
1 signatures
150 seconds
General
-
Target
50c2cfc58689d5655eff76f8e392cec0.elf
-
Size
75KB
-
MD5
50c2cfc58689d5655eff76f8e392cec0
-
SHA1
40e12d0b2edc55f44f050d8df743bac4231ce199
-
SHA256
69c7121587263bf8ec0d19fecc56a4b4ee6e1865acc9cc0d537296d7fafe71dc
-
SHA512
9ecd533d78b34cf57d57ea8f70a372181a1cf0624c796d8ee6a5a186a8891bb76dcaf4e5df454ea65de4e4fb8a4c18a44e363d337ca0c941427a22e2f0efabca
-
SSDEEP
1536:6+ngAY5vqg5boL5bm25BtA5XSA5E7dftcEnA5CaeeSEY6jNillfiNKuBfEw8rY7J:TY5ig5kL5y25zA5iA5EFO6A5CaeeSEkS
Score
5/10
Malware Config
Signatures
-
Reads runtime system information 3 IoCs
Reads data from /proc virtual filesystem.
description ioc Process /proc/361/exe /proc/361/exe Process not Found /proc/filesystems /proc/filesystems mkdir /proc/filesystems /proc/filesystems mv
Processes
-
/tmp/50c2cfc58689d5655eff76f8e392cec0.elf/tmp/50c2cfc58689d5655eff76f8e392cec0.elf1⤵PID:359
-
/bin/sh/bin/sh -c "mkdir /t1ueny70ej/ && >/t1ueny70ej/t1ueny70ej && cd /t1ueny70ej/ >/dev/null"1⤵PID:362
-
/bin/mkdirmkdir /t1ueny70ej/2⤵
- Reads runtime system information
PID:363
-
-
/bin/sh/bin/sh -c "mv /tmp/50c2cfc58689d5655eff76f8e392cec0.elf /t1ueny70ej/t1ueny70ej && chmod 777 /t1ueny70ej/t1ueny70ej >/dev/null"1⤵PID:364
-
/bin/mvmv /tmp/50c2cfc58689d5655eff76f8e392cec0.elf /t1ueny70ej/t1ueny70ej2⤵
- Reads runtime system information
PID:365
-
-
/bin/chmodchmod 777 /t1ueny70ej/t1ueny70ej2⤵PID:372
-