Analysis
-
max time kernel
0s -
platform
debian-9_armhf -
resource
debian9-armhf-20231215-en -
resource tags
arch:armhfimage:debian9-armhf-20231215-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem -
submitted
20-02-2024 22:48
Behavioral task
behavioral1
Sample
31e38562c3f3e1666ea47f1fa7f7f222.elf
Resource
debian9-armhf-20231215-en
debian-9-armhf
1 signatures
150 seconds
General
-
Target
31e38562c3f3e1666ea47f1fa7f7f222.elf
-
Size
208KB
-
MD5
31e38562c3f3e1666ea47f1fa7f7f222
-
SHA1
74525499b7c3646e4a48aebf6b82086d5b5eae8d
-
SHA256
0da47fdef671137ae1511281d891c6d101773976428f1ee97e3060ea5ad1a8e3
-
SHA512
980f5ff83ccc87f9d492171f6794d0a9d9cc6e7715b42e0ea46a006c141a82d7013f5d355ec99a6e1ac0ca6d60fb9811f8b7273826b4cece816ba7da492cb862
-
SSDEEP
6144:AfteffgB/8jygOW6hovuu+f4Gv949o6XwIqcBm:ut2fy/K30e2+Gv949o6XwIqam
Score
6/10
Malware Config
Signatures
-
Creates/modifies Cron job 1 TTPs 1 IoCs
Cron allows running tasks on a schedule, and is commonly used for malware persistence.
Processes:
31e38562c3f3e1666ea47f1fa7f7f222.elfdescription ioc process File opened for modification /etc/crontab 31e38562c3f3e1666ea47f1fa7f7f222.elf