Analysis
-
max time kernel
148s -
max time network
154s -
platform
debian-9_armhf -
resource
debian9-armhf-20231215-en -
resource tags
arch:armhfimage:debian9-armhf-20231215-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem -
submitted
20-12-2023 17:51
Behavioral task
behavioral1
Sample
fd37d062f9ba5cd07c0e1ad457575ab1
Resource
debian9-armhf-20231215-en
debian-9-armhf
2 signatures
150 seconds
General
-
Target
fd37d062f9ba5cd07c0e1ad457575ab1
-
Size
64KB
-
MD5
fd37d062f9ba5cd07c0e1ad457575ab1
-
SHA1
703566d15b858d429bf8968d6f15b1a89a4487d8
-
SHA256
a27ca70a93ea369fbde99f00246d8c1377dc408823952d42daccacda59c5a37c
-
SHA512
087c67e08c8b03e65858eb6d65f5a36a84ddbb45f2e912e8572f8ffc2b2e2e4ba073b310ad495c5fa1ce0cd84417d595fff10426d2ed2352a0c290c0f6c374be
-
SSDEEP
1536:grA8HZuide+ZNvDcdxEWtxSagDm/e99NCY/evyaH:l8Zde+ZNDc7/3r/8vH2q2
Score
7/10
Malware Config
Signatures
-
Changes its process name 1 IoCs
Processes:
description pid Changes the process name, possibly in an attempt to hide itself 661 -
Reads runtime system information 64 IoCs
Reads data from /proc virtual filesystem.
Processes:
description ioc File opened for reading /proc/457 File opened for reading /proc/494 File opened for reading /proc/568 File opened for reading /proc/581 File opened for reading /proc/643/maps File opened for reading /proc/655 File opened for reading /proc/425 File opened for reading /proc/545 File opened for reading /proc/595 File opened for reading /proc/647 File opened for reading /proc/547 File opened for reading /proc/614 File opened for reading /proc/633 File opened for reading /proc/411 File opened for reading /proc/435 File opened for reading /proc/446 File opened for reading /proc/611 File opened for reading /proc/539 File opened for reading /proc/548 File opened for reading /proc/571 File opened for reading /proc/576 File opened for reading /proc/641/exe File opened for reading /proc/644/exe File opened for reading /proc/422 File opened for reading /proc/483 File opened for reading /proc/500 File opened for reading /proc/511 File opened for reading /proc/572 File opened for reading /proc/640 File opened for reading /proc/409 File opened for reading /proc/412 File opened for reading /proc/585 File opened for reading /proc/632/exe File opened for reading /proc/482 File opened for reading /proc/560 File opened for reading /proc/587/maps File opened for reading /proc/606 File opened for reading /proc/619 File opened for reading /proc/638/maps File opened for reading /proc/647/maps File opened for reading /proc/407 File opened for reading /proc/423 File opened for reading /proc/493 File opened for reading /proc/603 File opened for reading /proc/476 File opened for reading /proc/538 File opened for reading /proc/551 File opened for reading /proc/607 File opened for reading /proc/515 File opened for reading /proc/557 File opened for reading /proc/445 File opened for reading /proc/472 File opened for reading /proc/641/maps File opened for reading /proc/434 File opened for reading /proc/558 File opened for reading /proc/561 File opened for reading /proc/616 File opened for reading /proc/620 File opened for reading /proc/661/exe File opened for reading /proc/475 File opened for reading /proc/543 File opened for reading /proc/659 File opened for reading /proc/413 File opened for reading /proc/455