Analysis
-
max time kernel
149s -
max time network
153s -
platform
debian-9_armhf -
resource
debian9-armhf-20240611-en -
resource tags
-
submitted
31-10-2024 15:50
General
-
Target
main_arm.elf
-
Size
130KB
-
MD5
e16bf3bb46312fed0104c25a7f83cb96
-
SHA1
c96d961246b4ce65dbd56e44bcc93329b1712ab6
-
SHA256
b12aeb9383a04569cfbd9f1518d7b20a62a14e51b8d2cce6d414231a13d3418b
-
SHA512
0bd925be4b07103d5d1b902cba1adda1e72bfcbd1fe26928c86276633b1ca28bba2e8e9f93ac3ebcac77d020af98788040f3aa7a48872a1d36b7148e5b66fffb
-
SSDEEP
1536:UFKdzElm18uZJNb4AdFa8eAZHk4VB7fzTTr71igYSvGueqZvd2UlqKwyw6RNPYT5:UFKp50yU8e947Lb71izSftBdRalK0
Score
7/10
Malware Config
Signatures
-
Deletes itself 1 IoCs
-
Traces itself 2 IoCs
Traces itself to prevent debugging attempts
-
Changes its process name 1 IoCs
-
Writes file to tmp directory 1 IoCs
Malware often drops required files in the /tmp directory.
Processes
-
/tmp/main_arm.elf/tmp/main_arm.elf1⤵
- Deletes itself
- Traces itself
- Changes its process name
- Writes file to tmp directory