Analysis
-
max time kernel
149s -
max time network
152s -
platform
debian-9_armhf -
resource
debian9-armhf-20240611-en -
resource tags
-
submitted
08/12/2024, 13:08
General
-
Target
main_arm.elf
-
Size
130KB
-
MD5
6032a48ced654e3f6a299bc19cb67ca7
-
SHA1
be0b8e32bbe653cfb3920e13c6923535cfec633f
-
SHA256
f0bf6cd7233eed5412e7d4c2e1dbc93716abb0756d209b4e2b91851b37b878a8
-
SHA512
2d79954f79dbf730778d949292bb500e36cfa228025ceda489678f4aa94ebc179497db7979048544ef5b8257266fd34bbbc15608ac092f5138713deacde30602
-
SSDEEP
1536:UFKdzElm18uZJNb4A6Fa8eAZHk4VB7fzTTr71igYSvGueqZvd2UlqKwyw6RNPYT6:UFKp50VU8e947Lb71izSftBdRalKj
Score
7/10
Malware Config
Signatures
-
Deletes itself 1 IoCs
-
Traces itself 2 IoCs
Traces itself to prevent debugging attempts
-
Changes its process name 1 IoCs
-
Writes file to tmp directory 1 IoCs
Malware often drops required files in the /tmp directory.
Processes
-
/tmp/main_arm.elf/tmp/main_arm.elf1⤵
- Deletes itself
- Traces itself
- Changes its process name
- Writes file to tmp directory