Analysis
-
max time kernel
150s -
max time network
159s -
platform
debian-12_armhf -
resource
debian12-armhf-20240221-en -
resource tags
-
submitted
22-11-2024 22:01
General
-
Target
main_arm7.elf
-
Size
175KB
-
MD5
bff7537b31cc3b7735fa970314555c95
-
SHA1
829f037febce3c79139841db272649e72bee8154
-
SHA256
ac000addce6da9f4ea84a00bf795c4b3710f1092fdf50bd9359ee734c7e7c170
-
SHA512
3959a05319e4e48b478779262e4633f57a0ab228097392e666d0444800d62930a698a0ed3d70f653ea8d2d2a1cef829a870a92a45557bdf047ee4775c63dec18
-
SSDEEP
3072:OufUMc2shifQ4zeLaR9DadE8d43WyWLR3wXpoxM/REnVmlHQFY5CL0:FfU3dif5iLaR9DadESuWLR3MOxM/RE6t
Score
7/10
Malware Config
Signatures
-
Deletes itself 1 IoCs
-
Traces itself 2 IoCs
Traces itself to prevent debugging attempts
-
Changes its process name 1 IoCs
-
Writes file to tmp directory 1 IoCs
Malware often drops required files in the /tmp directory.
Processes
-
/tmp/main_arm7.elf/tmp/main_arm7.elf1⤵
- Deletes itself
- Traces itself
- Changes its process name
- Writes file to tmp directory