180989d6d886af835ae4584b6047fe4887dedb4a875438d0d124f72aaa29caef

Analysis

max time kernel
3s
platform
debian-9_armhf
resource
debian9-armhf-20231215-en
resource tags

arch:armhfimage:debian9-armhf-20231215-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem
submitted
01-02-2024 15:07

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

IObeENwjarm5
Size

208KB
MD5

02e8929813570f32ccd84df7363f99cb
SHA1

a753fcf0ff1cdefde8a2dbe6654f94416f30240a
SHA256

180989d6d886af835ae4584b6047fe4887dedb4a875438d0d124f72aaa29caef
SHA512

532d177b9c04d0bd28f0ba14e09a7c97402c9231637e4ba17aae1a97bb32fee6a17f463cfef950d119b74ec94fa51e445dab96d4a6d435275bf566ba88bcbd8a
SSDEEP

6144:kfteTTU4z8LGg+Wih0DuO+H8yv949o6XwIqcBm:KtyTXzyjkKa6yv949o6XwIqam

Score

6^/10

persistence

Malware Config

Signatures

Creates/modifies Cron job 1 TTPs 1 IoCs

Cron allows running tasks on a schedule, and is commonly used for malware persistence.

persistence

Scheduled Task/Job

T1053

Processes:

IObeENwjarm5

description	ioc	Process
File opened for modification	/etc/crontab	IObeENwjarm5

/tmp/IObeENwjarm5
/tmp/IObeENwjarm5
1⤵
- Creates/modifies Cron job
PID:678

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Scheduled Task/Job

T1053

Persistence

Scheduled Task/Job

T1053

Privilege Escalation

Scheduled Task/Job

T1053

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads