Analysis
-
max time kernel
149s -
max time network
142s -
platform
debian-9_armhf -
resource
debian9-armhf-20240611-en -
resource tags
-
submitted
03-07-2024 16:54
General
-
Target
sarm7
-
Size
65KB
-
MD5
99f5ce55259cbf7348171a2949b013fa
-
SHA1
75526d6c1c2f09a8bb544fa0abff0188567743e2
-
SHA256
0c63edab024c083db90a892686535cdcc6e50840df757908bdfb36d79a6d21e3
-
SHA512
5d2549d5ef5ebbd5e98c31fe1f29d31ff4ef35de5c87b36b39bfa59a8b0af530e72e2ffd9c4c448d68ce3eb1fb26151665d679d7fef5c0103938889bd669b7d7
-
SSDEEP
1536:LsnAgY61gVXgCE15BcmRGMi1uij2lIsBiDa+0q1mhC:QfKhvu5BcmRGMi1pHa+T1aC
Score
7/10
Malware Config
Signatures
-
Deletes itself 1 IoCs
-
Unexpected DNS network traffic destination 4 IoCs
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Reads runtime system information 1 IoCs
Reads data from /proc virtual filesystem.
Processes
-
/tmp/sarm7/tmp/sarm7 massload1⤵
- Deletes itself
- Reads runtime system information