Overview

overview

7

Static

static

1

4d635ecc52...23.elf

debian-12-armhf

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    20e7ae418656d5df06aa58688eb4d24d.bin

  • Size

    50KB

  • Sample

    240819-bdhlhavfqc

  • MD5

    4651b628986b415cd23a610383c9af51

  • SHA1

    1c4f458c7d513507d8fea163eaa1392256c779f8

  • SHA256

    8ae3d6f0a28b191ea36c6a8255178c83831f3df9417a3e0461ebc1410917fcfa

  • SHA512

    6e51f4d81e88cf3b130be5b713ef30dda9c94c2dd4109d87b5009cfb780f83ced627d791387aebee097dc786d0eb570105c050224cb46cfa6fc00ef0b61af767

  • SSDEEP

    768:KXtjnUHjz2Ed+rZjTJK9+FSc+yO7tKarceZurYBx4C7jiHIkB6iARN:K6HjznUJJec+yO7tKarXSMr7uoZfz

Score
7/10
persistence

Malware Config

Targets

    • Target

      4d635ecc52189296d8460439750214f3ea36966c544154f753ece59e2205ff23.elf

    • Size

      122KB

    • MD5

      20e7ae418656d5df06aa58688eb4d24d

    • SHA1

      a2dbb28bcebf83011d3d2109cd11f22e3db3d1fa

    • SHA256

      4d635ecc52189296d8460439750214f3ea36966c544154f753ece59e2205ff23

    • SHA512

      bf07ea42dc6db28d121b73b9792a6a18270e95f8f42b0f90f98b75c11930e0e2a229f418f18f5bc3de7e62d94ea668a64c392b73af7254033eb7bad4e27ef29d

    • SSDEEP

      3072:EKlmVLTRAdyi8sclagWcnKFQxkPa55VOpmmyYThQ/1RnoY:ERsYaKBxkPa1OpmmyYThQ/1RnoY

    Score
    7/10
    persistence

    • Renames itself

    • Creates/modifies Cron job

      Cron allows running tasks on a schedule, and is commonly used for malware persistence.

      persistence

    • Enumerates running processes

      Discovers information about currently running processes on the system

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks