Analysis
-
max time kernel
149s -
max time network
147s -
platform
debian-9_armhf -
resource
debian9-armhf-20240729-en -
resource tags
arch:armhfimage:debian9-armhf-20240729-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem -
submitted
14-12-2024 14:15
Behavioral task
behavioral1
Sample
fe9351ef4d9ce1004ee1ad165f86bbe8b34d44b4db40f54e67c815bd32bf4846.elf
Resource
debian9-armhf-20240729-en
debian-9-armhf
3 signatures
150 seconds
General
-
Target
fe9351ef4d9ce1004ee1ad165f86bbe8b34d44b4db40f54e67c815bd32bf4846.elf
-
Size
121KB
-
MD5
cef7ed66f2c75284984bc175e1a9641f
-
SHA1
ebf12f0e7d229cc34e93df7ad6e2210bda698b48
-
SHA256
fe9351ef4d9ce1004ee1ad165f86bbe8b34d44b4db40f54e67c815bd32bf4846
-
SHA512
5968132804fe069e766f7a59583ea99abf903992d2e66fdc9f7e78510dac3aee9f9885ce6e1a6e98fbfe5acf3bb4f48a0b4365b7edd327e87dab95195ca062bb
-
SSDEEP
1536:gWnIFqtLXHG4nmhJNhFgiwgyT+YNlx0iEI70UgIt6PDFrk3UM24y7/Mp1C1JI0Oo:PmF3NhFgiwgwGI70NIODFIOV7sc
Score
7/10
Malware Config
Signatures
-
Deletes itself 1 IoCs
pid Process 640 fe9351ef4d9ce1004ee1ad165f86bbe8b34d44b4db40f54e67c815bd32bf4846.elf -
Renames itself 1 IoCs
pid Process 640 fe9351ef4d9ce1004ee1ad165f86bbe8b34d44b4db40f54e67c815bd32bf4846.elf -
Changes its process name 1 IoCs
description ioc pid Process Changes the process name, possibly in an attempt to hide itself a 640 fe9351ef4d9ce1004ee1ad165f86bbe8b34d44b4db40f54e67c815bd32bf4846.elf