Static task
static1
Behavioral task
behavioral1
Sample
e15e93db3ce3a8a22adb4b18e0e37b93f39c495e4a97008f9b1a9a42e1fac2b0
Resource
debian9-armhf-en-20211208
General
-
Target
e15e93db3ce3a8a22adb4b18e0e37b93f39c495e4a97008f9b1a9a42e1fac2b0
-
Size
90KB
-
MD5
abfcf46b7eb068f3466231f3f2474927
-
SHA1
b1fad04e9e0fdda10ce8b7928e5c09ef1710eb89
-
SHA256
4a2451ece35a4b980621fe8ce75e096baa7b00ca4761af060e39d6a6e85aaf8c
-
SHA512
6e6fa1572f33f91a25193cd4f2ad3a8a3cb88f41033a726a9b7b1a09ac5b6b530b2f7bb344f207627aa2a1512961e6134d3493c36f58866e853ce2794d87ca68
-
SSDEEP
1536:Q0hJqmzBywOojP4lByUCGDGARGKv1jV+PvQ/u8PJmyaxwb9T2RmXPzBYSFWZDlHr:/hJqmF9tTE9CGHGmoPiJZ7b9CRmmSkh9
Malware Config
Signatures
-
Patched UPX-packed file 1 IoCs
Sample is packed with UPX but required header fields are zeroed out to prevent unpacking with the default UPX tool.
resource yara_rule static1/unpack001/e15e93db3ce3a8a22adb4b18e0e37b93f39c495e4a97008f9b1a9a42e1fac2b0 patched_upx
Files
-
e15e93db3ce3a8a22adb4b18e0e37b93f39c495e4a97008f9b1a9a42e1fac2b0.zip
-
e15e93db3ce3a8a22adb4b18e0e37b93f39c495e4a97008f9b1a9a42e1fac2b0.elf linux arm