Analysis

  • max time kernel
    149s
  • max time network
    153s
  • platform
    debian-9_armhf
  • resource
    debian9-armhf-20240226-en
  • resource tags

    arch:armhfimage:debian9-armhf-20240226-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem
  • submitted
    19/04/2024, 02:13

General

  • Target

    f7f1973f6160bb4251ea95ebd1c3a5e6ef39c28a1a98e40aef7542b4daeb80a0.elf

  • Size

    175KB

  • MD5

    f4a2e178b2b5b6a5deb1d6c76de0a49b

  • SHA1

    7d5826f9f1e4da77dc3130b1dd3c52fe9895236f

  • SHA256

    f7f1973f6160bb4251ea95ebd1c3a5e6ef39c28a1a98e40aef7542b4daeb80a0

  • SHA512

    7358770b367c587883f49c9bd4d083b1c4702fef2eb8d01177d41058f325fb87330972720f5d654c773e905a6f4e05e631184dcc85d8ae162c136c5c15ab9566

  • SSDEEP

    3072:EZHZ1pjx3vAqTkgabsh+OcAIeLHSwBjvq2cJsoyM/Rs+qtK:EZ5Hx39ogabsh+nAFlBjq2+xyM/R7qK

Score
7/10

Malware Config

Signatures

  • Changes its process name 1 IoCs
  • Enumerates running processes

    Discovers information about currently running processes on the system

  • Reads runtime system information 64 IoCs

    Reads data from /proc virtual filesystem.

Processes

  • /tmp/f7f1973f6160bb4251ea95ebd1c3a5e6ef39c28a1a98e40aef7542b4daeb80a0.elf
    /tmp/f7f1973f6160bb4251ea95ebd1c3a5e6ef39c28a1a98e40aef7542b4daeb80a0.elf
    1⤵
    • Changes its process name
    PID:664

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads