Analysis
-
max time kernel
149s -
max time network
154s -
platform
debian-9_armhf -
resource
debian9-armhf-20240611-en -
resource tags
-
submitted
03-10-2024 01:02
General
-
Target
05c76f1d34938779c4006cba3285c58bf250d1ddb6b3a241a7154d0c0909097e.elf
-
Size
126KB
-
MD5
ac87de8c978b30a6635732f8ed2ab1bb
-
SHA1
4b027c32a17f363f1f598fc0e7a05b62b7966951
-
SHA256
05c76f1d34938779c4006cba3285c58bf250d1ddb6b3a241a7154d0c0909097e
-
SHA512
5308b00d14bddebe434c4a377370c173d0aa00cf36780e0a0ceaa6748f227f2b7adf9d174937c911640673911950061f262c345ec4cd87e54926e4cea89a8379
-
SSDEEP
1536:p/Ka0rG5yC/cMChygtTOBdWFAcJX4VlgXTAXYFkWUGZrSo51WhrV1l3GwywEReQN:ZKaprMh71OXWFh4UXcYFkWpZlvWNUmZ
Score
7/10
Malware Config
Signatures
-
Deletes itself 1 IoCs
-
Traces itself 2 IoCs
Traces itself to prevent debugging attempts
-
Changes its process name 1 IoCs
-
Writes file to tmp directory 1 IoCs
Malware often drops required files in the /tmp directory.
Processes
-
/tmp/05c76f1d34938779c4006cba3285c58bf250d1ddb6b3a241a7154d0c0909097e.elf/tmp/05c76f1d34938779c4006cba3285c58bf250d1ddb6b3a241a7154d0c0909097e.elf1⤵
- Deletes itself
- Traces itself
- Changes its process name
- Writes file to tmp directory