Analysis
-
max time kernel
0s -
max time network
126s -
platform
debian-9_armhf -
resource
debian9-armhf-20221111-en -
resource tags
arch:armhfimage:debian9-armhf-20221111-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem -
submitted
09/01/2023, 06:28
Static task
static1
Behavioral task
behavioral1
Sample
SecuriteInfo.com.Linux.Siggen.9999.17584.18163.elf
Resource
debian9-armhf-20221111-en
1 signatures
150 seconds
General
-
Target
SecuriteInfo.com.Linux.Siggen.9999.17584.18163.elf
-
Size
66KB
-
MD5
61b4ac4d81bcd312cc2aca6edf006985
-
SHA1
ceef0b3f18ed653be192f043ca7a6a44fe9556dc
-
SHA256
7a70e25b2a02ce07da71c2dfc52293112b5d80bfdd9ddd10d25fc78a1f20a928
-
SHA512
6fe75b24f0669ab956154ae27093e8223030cea098fc389536e1a0b0b27fdf026dc3cc053fc67df1d6436f56a1e3872895ba52a4306873e89119a19f8b5b052d
-
SSDEEP
1536:vaqYs0AyOiUlthO9M/sdHcQfjN/5Hc90qkmOIjPfhO+7r:v5x29pdHDfjNeZ7X
Score
5/10
Malware Config
Signatures
-
Reads runtime system information 2 IoCs
Reads data from /proc virtual filesystem.
description ioc Process /proc/iomem /proc/iomem SecuriteInfo.com.Linux.Siggen.9999.17584.18163.elf /proc/353/cmdline /proc/353/cmdline Process not Found