Analysis
-
max time kernel
150s -
max time network
163s -
platform
debian-12_armhf -
resource
debian12-armhf-20240221-en -
resource tags
arch:armhfimage:debian12-armhf-20240221-enkernel:6.1.0-17-armmp-lpaelocale:en-usos:debian-12-armhfsystem -
submitted
13-12-2024 09:19
Behavioral task
behavioral1
Sample
arm6.elf
Resource
debian12-armhf-20240221-en
debian-12-armhf
3 signatures
150 seconds
General
-
Target
arm6.elf
-
Size
121KB
-
MD5
f9023cf9f0c0a8532869369370e02b75
-
SHA1
b0ab5bca51ed7f331772d1c7a139c9ce8d9027df
-
SHA256
89870fba20251e240c432a11e4a43369d78db91876f58bf141e761be07cda64f
-
SHA512
363e602878ab3528b3dccfde2847a7ddefba0c557524aefdfd4b113592da983b3b6a0d1ee0f4f4d0fa58900204169369f90ef53fbffaaaf1cfdf0aa487cda5f5
-
SSDEEP
1536:gWnIFqtLXHG4nmhJNhFgiwgyT+YNlx0iEI70UgIt6PDQr0n52u2V/Mp1C1JI0O92:PmF3NhFgiwgwGI70NIODQAUxVsc
Score
7/10
Malware Config
Signatures
-
Deletes itself 1 IoCs
pid Process 708 arm6.elf -
Renames itself 1 IoCs
pid Process 708 arm6.elf -
Changes its process name 1 IoCs
description ioc pid Process Changes the process name, possibly in an attempt to hide itself a 708 arm6.elf