Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
SecuriteInfo.com.Trojan.Linux.GenericKD.6245.25884.4242
Resource
debian9-armhf-20221111-en
debian-9-armhf
0 signatures
150 seconds
General
-
Target
SecuriteInfo.com.Trojan.Linux.GenericKD.6245.25884.4242
-
Size
104KB
-
MD5
c187268b466a3059073a1494712b1e72
-
SHA1
d641934c7b038fe5b543d93bac4c342514587d66
-
SHA256
912a709819892a175b2bed25888d0e8f4d665a78eaba17d5466da17361a2dad0
-
SHA512
d851d460f12a28addcac220ea9bcf1e9ef86b9abcb4d511242fd3575d75d36008f59b3e1e06834f0761c792dd5239f23b8a1ace8b9f8e949f3e9b45f5692e50f
-
SSDEEP
1536:W6aXdGP4rr+RRm5Q3UV+XAJ+1SGQJlYGlm2YG6pHWhwuKJifSfJggBGErqahP/qg:W5dGAqDqP+gPYHWwi8JmEJh685Ug7
Score
8/10
Malware Config
Signatures
-
Patched UPX-packed file 1 IoCs
Sample is packed with UPX but required header fields are zeroed out to prevent unpacking with the default UPX tool.
resource yara_rule sample patched_upx
Files
-
SecuriteInfo.com.Trojan.Linux.GenericKD.6245.25884.4242.elf linux arm