Analysis

  • max time kernel
    2s
  • max time network
    197s
  • platform
    debian-12_armhf
  • resource
    debian12-armhf-20240221-en
  • resource tags

    arch:armhfimage:debian12-armhf-20240221-enkernel:6.1.0-17-armmp-lpaelocale:en-usos:debian-12-armhfsystem
  • submitted
    19-11-2024 18:04

General

  • Target

    c2-3.4.0_armv6_linux

  • Size

    11.8MB

  • MD5

    70aa611daa6ef7dc10d7a41d4179e3b2

  • SHA1

    c56c3fda13ffdc483e295dbda6c7900495bb2024

  • SHA256

    0a1720f433f5e22118dea9126637364b222b25d812cbb3a9c35fcbc8561650db

  • SHA512

    2e80466510c8212f7bac1991f95eb0877665bc15a2eb887e69f6c4f4cb229a513966d1bbff80b2c2591e406c569b587fb62e5c99aa2434c3867817f564acdddb

  • SSDEEP

    98304:SJp1ACfaZh7Z8K6Koy/Q4EOhF5ysqKfmuOQ:SJpQ5bjQ4PH8sqKfJOQ

Score
7/10

Malware Config

Signatures

  • Renames itself 2 IoCs
  • Enumerates kernel/hardware configuration 1 TTPs 2 IoCs

    Reads contents of /sys virtual filesystem to enumerate system information.

Processes

  • /tmp/c2-3.4.0_armv6_linux
    /tmp/c2-3.4.0_armv6_linux
    1⤵
    • Renames itself
    • Enumerates kernel/hardware configuration
    PID:809
    • /tmp/c2-3.4.0_armv6_linux
      /tmp/c2-3.4.0_armv6_linux
      2⤵
      • Enumerates kernel/hardware configuration
      PID:817

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads