Analysis
-
max time kernel
150s -
max time network
166s -
platform
debian-12_armhf -
resource
debian12-armhf-20240221-en -
resource tags
-
submitted
11-12-2024 00:22
General
-
Target
main_arm7.elf
-
Size
177KB
-
MD5
71fdc3ae601c205ec3ee6ac09bf3d696
-
SHA1
5d966ff34221738cf46493303979ad54d222f2db
-
SHA256
2eeb2b18a8c81cdec0762ecb2fc19cd497e1a9dda8ba4c7a2341c9cef1bab4f4
-
SHA512
32595d1b3ef59e0f2277150858987bc9250e440751b37eb9461b78f9df6b00452186ffa89482d18b042ad2d9a11b10975a481808d85bdc5ecc5f6a03821c0e4f
-
SSDEEP
3072:8Le6vh5G1QIruCee+asuTuRebU7IVILyZQe38YhTfYo+M/RzApthLn:0e6vfRIr1r+asuTuReAvLy/38+x+M/R+
Score
7/10
Malware Config
Signatures
-
Deletes itself 1 IoCs
-
Traces itself 2 IoCs
Traces itself to prevent debugging attempts
-
Changes its process name 1 IoCs
-
Writes file to tmp directory 1 IoCs
Malware often drops required files in the /tmp directory.
Processes
-
/tmp/main_arm7.elf/tmp/main_arm7.elf1⤵
- Deletes itself
- Traces itself
- Changes its process name
- Writes file to tmp directory