Behavioral task
behavioral1
Sample
base/php-arm
Resource
debian9-armhf-20231221-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
base/php-x86
Resource
ubuntu1804-amd64-20231215-en
0 signatures
150 seconds
General
-
Target
7edfa2400a172dba9597f6337dbe0ef2
-
Size
11.5MB
-
MD5
7edfa2400a172dba9597f6337dbe0ef2
-
SHA1
9572a6263475529c4da3efa65d16dbde2b57f8c9
-
SHA256
a27e60b8e6ca36510dc98c6b978303b7b990b386b9000942f1e7e2f5c1e25fa0
-
SHA512
c488b1a97cbb7ce38af266138ef959b406fab7a37599dae310af1df560722c954fc16582b5ea95c76e35764088623e4dafe49541655449f65ba0dab3f5574fb7
-
SSDEEP
196608:GubBWAGuyZAV7NChVbzMnloXhfS7EJkA8IxY5JSJsPP1VknJ/cp01o7d2Bk9KLnd:G+WAG7bQlox5kKASJsn1VkJ/s01edJ9q
Score
8/10
Malware Config
Signatures
-
Patched UPX-packed file 2 IoCs
Sample is packed with UPX but required header fields are zeroed out to prevent unpacking with the default UPX tool.
resource yara_rule static1/unpack001/base/php-arm patched_upx static1/unpack001/base/php-x86 patched_upx -
resource yara_rule static1/unpack001/base/php-arm upx static1/unpack001/base/php-x86 upx
Files
-
7edfa2400a172dba9597f6337dbe0ef2.zip
-
base/conforig/phpconf.ini
-
base/php-arm.elf linux arm
-
base/php-x86.elf linux x86
-
base/readme.txt