Analysis
-
max time kernel
149s -
max time network
150s -
platform
debian-9_armhf -
resource
debian9-armhf-20240418-en -
resource tags
-
submitted
16-12-2024 09:24
General
-
Target
main_arm5.elf
-
Size
126KB
-
MD5
fcbfecee66b0c721b87c8411c9645e26
-
SHA1
55716317282f397ab18a876b8a110d791639d881
-
SHA256
c89fe8263ff6014ba8734df066fdc59190d702a798ea20e62592bd368d82e9b0
-
SHA512
3b31ef99b71a860ab721e8fa112908a3f82291ba5f5f356785009dcb31e12c2907f5220681ab2705bd6849275706ae0cd81f36886c879db322be80ee22fd1fef
-
SSDEEP
1536:p/Ka0rG5yC/cMChygtVOBdWFAcJX4VlgXTAXYFkWUGZrSo51WhrV1l3GwywEReQ:ZKaprMh7TOXWFh4UXcYFkWpZlvWNUmi
Score
7/10
Malware Config
Signatures
-
Deletes itself 1 IoCs
-
Traces itself 2 IoCs
Traces itself to prevent debugging attempts
-
Changes its process name 1 IoCs
-
Writes file to tmp directory 1 IoCs
Malware often drops required files in the /tmp directory.
Processes
-
/tmp/main_arm5.elf/tmp/main_arm5.elf1⤵
- Deletes itself
- Traces itself
- Changes its process name
- Writes file to tmp directory