Analysis
-
max time kernel
144s -
max time network
146s -
platform
debian-9_armhf -
resource
debian9-armhf-20240611-en -
resource tags
arch:armhfimage:debian9-armhf-20240611-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem -
submitted
03-11-2024 02:45
Static task
static1
Behavioral task
behavioral1
Sample
4f6b90d70bab739751bb97249526f690d7efa5f132c2074b9d9844df77739ef0.elf
Resource
debian9-armhf-20240611-en
debian-9-armhf
2 signatures
150 seconds
General
-
Target
4f6b90d70bab739751bb97249526f690d7efa5f132c2074b9d9844df77739ef0.elf
-
Size
65KB
-
MD5
408671fd5b164e7685880a12ec8e8747
-
SHA1
f021b4650b4ae53098516723291c9b97ff9684fa
-
SHA256
4f6b90d70bab739751bb97249526f690d7efa5f132c2074b9d9844df77739ef0
-
SHA512
9002964d0f143dd6361e11139f1be54cafb13a70a3a10ee0d585a0a2af2fbb4a9e3a6bf3d8d97e022b68f18a78524849637a45dea06e9c79996ccdc2b5ffc65b
-
SSDEEP
1536:OJfSfKVuHGNfLKC5ir1ZXUY0S1Q/I1mHlOB7GR6uh8Sz9:Ocf88OXiP/1Q/iB7GRTyk
Score
7/10
Malware Config
Signatures
-
Deletes itself 1 IoCs
pid Process 653 4f6b90d70bab739751bb97249526f690d7efa5f132c2074b9d9844df77739ef0.elf -
Changes its process name 1 IoCs
description ioc pid Process Changes the process name, possibly in an attempt to hide itself cksn2ncokf45v3rqu42qsw82hlrkb30e 653 4f6b90d70bab739751bb97249526f690d7efa5f132c2074b9d9844df77739ef0.elf