Analysis
-
max time kernel
150s -
max time network
156s -
platform
debian-12_armhf -
resource
debian12-armhf-20240221-en -
resource tags
-
submitted
31-10-2024 03:45
General
-
Target
b02981967319c7a8081ca5a71230d41b44d6cde6d149646ff1b2489280a9c550.elf
-
Size
177KB
-
MD5
0694852e4d8f0767f2f109db4d897b98
-
SHA1
fada84112fb96be388d28cb8807e5dd901698c57
-
SHA256
b02981967319c7a8081ca5a71230d41b44d6cde6d149646ff1b2489280a9c550
-
SHA512
3207cb5a42aa051cff3200e3d5bee599908f077a751eeec6eb56842d00d7aec242719446e2cde3db896be997a78bb5e07d1f015fe530c5bf3551c88c54634dc1
-
SSDEEP
3072:OzeSvtfD84oALv2eEQakGzORuGMzw99LBd38YhTfYo+M/RM+FDhdLn:2eSvJvoA7TEQakGzORuBGLBd38+x+M/z
Score
7/10
Malware Config
Signatures
-
Deletes itself 1 IoCs
-
Traces itself 2 IoCs
Traces itself to prevent debugging attempts
-
Changes its process name 1 IoCs
-
Writes file to tmp directory 1 IoCs
Malware often drops required files in the /tmp directory.
Processes
-
/tmp/b02981967319c7a8081ca5a71230d41b44d6cde6d149646ff1b2489280a9c550.elf/tmp/b02981967319c7a8081ca5a71230d41b44d6cde6d149646ff1b2489280a9c550.elf1⤵
- Deletes itself
- Traces itself
- Changes its process name
- Writes file to tmp directory