Analysis
-
max time kernel
123s -
max time network
71s -
platform
debian-9_armhf -
resource
debian9-armhf-20231215-en -
resource tags
-
submitted
28-01-2024 21:02
General
-
Target
7dfed656ca6a4a14a4e40e2865ba7697
-
Size
4.5MB
-
MD5
7dfed656ca6a4a14a4e40e2865ba7697
-
SHA1
955db50f05fbf2b96c0e0f0ca860f1d7b67bf2b0
-
SHA256
551e03e17d1df9bd5b712bec7763578c01e7bffe9b93db246e36ec0a174f7467
-
SHA512
4860ce88b1105e9ec9171ed84526f9a60a844c8a5ef93d6435e9d08b638829ae868b8a56e9b62069726e8311fa63c72ec81998841e8ea23b5a08c9e8290df8c6
-
SSDEEP
49152:wSVay3WHHh74K1kLq2C6MzohPtKuAb7/C:zVa2Wnh0q0qfoO/C
Score
3/10
Malware Config
Signatures
-
Enumerates kernel/hardware configuration 1 TTPs 1 IoCs
Reads contents of /sys virtual filesystem to enumerate system information.
-
Writes file to tmp directory 1 IoCs
Malware often drops required files in the /tmp directory.
Processes
-
/tmp/7dfed656ca6a4a14a4e40e2865ba7697/tmp/7dfed656ca6a4a14a4e40e2865ba76971⤵
- Enumerates kernel/hardware configuration
- Writes file to tmp directory