Analysis
-
max time kernel
149s -
max time network
151s -
platform
debian-12_armhf -
resource
debian12-armhf-20240418-en -
resource tags
-
submitted
17-12-2024 02:03
General
-
Target
063df03a11c49bced119c245f4cb77f8b0662e02d403ca9b7e5ceed94efcae0e.elf
-
Size
177KB
-
MD5
c9e4d040ac334cf292d6722e990dec72
-
SHA1
7a512195c809dd528d78a287fabd45a7b3549908
-
SHA256
063df03a11c49bced119c245f4cb77f8b0662e02d403ca9b7e5ceed94efcae0e
-
SHA512
be2bc0d483d7ab6201ec8aa82f820336f76becc3373f55faa0d3e50d7fdd84e0757d4b2fb184d71a99c87783849e397e249a933a1d0fecc44a5b893ef679626b
-
SSDEEP
3072:OLe6vhfZQIvuCeeuaMuTuRez43IVILmZQy38YhTfYo+M/RgDlplLn:ee6vheIv1ruaMuTuReErLm738+x+M/Ro
Score
7/10
Malware Config
Signatures
-
Deletes itself 1 IoCs
-
Traces itself 2 IoCs
Traces itself to prevent debugging attempts
-
Changes its process name 1 IoCs
-
Writes file to tmp directory 1 IoCs
Malware often drops required files in the /tmp directory.
Processes
-
/tmp/063df03a11c49bced119c245f4cb77f8b0662e02d403ca9b7e5ceed94efcae0e.elf/tmp/063df03a11c49bced119c245f4cb77f8b0662e02d403ca9b7e5ceed94efcae0e.elf1⤵
- Deletes itself
- Traces itself
- Changes its process name
- Writes file to tmp directory