Analysis
-
max time kernel
0s -
max time network
2s -
platform
debian-9_mips -
resource
debian9-mipsbe-20240226-en -
resource tags
arch:mipsimage:debian9-mipsbe-20240226-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipssystem -
submitted
15-03-2024 11:26
Static task
static1
Behavioral task
behavioral1
Sample
SecuriteInfo.com.ELF.Armbar-B.952.25938.elf
Resource
debian9-mipsbe-20240226-en
debian-9-mips
1 signatures
150 seconds
General
-
Target
SecuriteInfo.com.ELF.Armbar-B.952.25938.elf
-
Size
3.1MB
-
MD5
b91d018550b5ca51f9ba84293b8d82b5
-
SHA1
40372748524c0f8d3386258a927f648585cd6eae
-
SHA256
0fa944876dec7956b856c8ebb5fb2d66b46ff35deaf3b90d0bc35f07fac39365
-
SHA512
ced41d985db69f23bab39a4f58aaf8725c01c0f491b99b6ceebfdb28a176b01160be1cae39bfb5b89854108ad4133b6ff2adf6415f2d01b381aac8b6d807cb64
-
SSDEEP
49152:qX7CIkaDfhNuhYCry1FwWLBL53mcXSdtS:ATuny1+853lso
Score
3/10
Malware Config
Signatures
-
Enumerates kernel/hardware configuration 1 TTPs 1 IoCs
Reads contents of /sys virtual filesystem to enumerate system information.
description ioc Process File opened for reading /sys/kernel/mm/transparent_hugepage/hpage_pmd_size SecuriteInfo.com.ELF.Armbar-B.952.25938.elf