Analysis

  • max time kernel
    0s
  • platform
    debian-9_armhf
  • resource
    debian9-armhf-20240611-en
  • resource tags

    arch:armhfimage:debian9-armhf-20240611-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem
  • submitted
    01-09-2024 21:43

General

  • Target

    tools/busybox

  • Size

    1.3MB

  • MD5

    c40fc75c68c7e1073ad21c55676aa7f5

  • SHA1

    9c7610fc6712fd6f035751eb0e880ff94f6ec75c

  • SHA256

    66436dc1e97d22886ed2d35bd69a9cb82bb0fdba4e4267c5184cee1d39a2f5f4

  • SHA512

    bee9d333c3df0c368a1a226b0db81e2d8a13c603d997d570373579d9e6910f94df902d9753d97ffe596a8d1f91632608181fe2bf1833d857cd7fc0c18d32a6d9

  • SSDEEP

    24576:ZLfElXaqMRso87z87y5h+Rdqbt7FLUsLL63uIr+3k4v:ZLc5aqw2uc+ObH63t+3k4v

Score
3/10

Malware Config

Signatures

  • Reads runtime system information 1 IoCs

    Reads data from /proc virtual filesystem.

Processes

  • /tmp/tools/busybox
    /tmp/tools/busybox
    1⤵
    • Reads runtime system information
    PID:678

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads