Analysis
-
max time kernel
149s -
max time network
153s -
platform
debian-12_armhf -
resource
debian12-armhf-20240418-en -
resource tags
-
submitted
15-12-2024 09:51
General
-
Target
main_arm7.elf
-
Size
177KB
-
MD5
e7e3b3211778c601ce99c35df04a61fd
-
SHA1
96ac8ebf876bcd0168d6ece97aec674a6ba58959
-
SHA256
4f512fd8f752949a9811ceb2b0091098573f54d862b71fbfee850946cd385c1d
-
SHA512
fdc8f378c70bc762d471d7b0fd42a13137f6a407b02749cae343660333d23885ce27036f0d656869441c8647c7a063d48447a166773b2a39f62f8a34519b792b
-
SSDEEP
3072:OLe6vh31QIruCee+asuTuRebU7IVIL+ZQy38YhTfYo+M/Rvs1tlLn:ee6vhaIr1r+asuTuReAvL+738+x+M/RO
Score
7/10
Malware Config
Signatures
-
Deletes itself 1 IoCs
-
Traces itself 2 IoCs
Traces itself to prevent debugging attempts
-
Changes its process name 1 IoCs
-
Writes file to tmp directory 1 IoCs
Malware often drops required files in the /tmp directory.
Processes
-
/tmp/main_arm7.elf/tmp/main_arm7.elf1⤵
- Deletes itself
- Traces itself
- Changes its process name
- Writes file to tmp directory