Analysis
-
max time kernel
149s -
max time network
151s -
platform
debian-12_armhf -
resource
debian12-armhf-20240729-en -
resource tags
-
submitted
09/12/2024, 02:07
General
-
Target
206679beaa28e87bc288606b982f905e76ef20555f1c2b4863e99331d623aa7c.elf
-
Size
177KB
-
MD5
a4002c2191fa050f41157f6417fb1a1b
-
SHA1
60de5df5bcb3c3917897f83d6876ce3398420fa4
-
SHA256
206679beaa28e87bc288606b982f905e76ef20555f1c2b4863e99331d623aa7c
-
SHA512
6f138183be2e0b33d34ba90a33af1d4250bd5434cf00302e0c8d9ff263bc5451dcc1e926baa1a3ad8ba45875f6c362d41299e6bc86a1ee9a6c6ac4b16f844f71
-
SSDEEP
3072:OLe6vhfZQIvuCeeuaMuTuRez43IVIL9ZQy38YhTfYo+M/RgDlplLn:ee6vheIv1ruaMuTuReErL9738+x+M/Ro
Score
7/10
Malware Config
Signatures
-
Deletes itself 1 IoCs
-
Traces itself 2 IoCs
Traces itself to prevent debugging attempts
-
Changes its process name 1 IoCs
-
Writes file to tmp directory 1 IoCs
Malware often drops required files in the /tmp directory.
Processes
-
/tmp/206679beaa28e87bc288606b982f905e76ef20555f1c2b4863e99331d623aa7c.elf/tmp/206679beaa28e87bc288606b982f905e76ef20555f1c2b4863e99331d623aa7c.elf1⤵
- Deletes itself
- Traces itself
- Changes its process name
- Writes file to tmp directory