Analysis
-
max time kernel
149s -
max time network
152s -
platform
debian-12_armhf -
resource
debian12-armhf-20240729-en -
resource tags
-
submitted
17-12-2024 03:13
General
-
Target
6d3389cc34090cfd940ac38a6bc7ad564a6ca856b40bd0dc100987a9593c756e.elf
-
Size
177KB
-
MD5
23e47cedaa73e671c34b1a446da906b1
-
SHA1
eb7ede15fe8cf97f4c24c78f61289e3bb09fa833
-
SHA256
6d3389cc34090cfd940ac38a6bc7ad564a6ca856b40bd0dc100987a9593c756e
-
SHA512
ad2a5714d53246661c79765c700188ed91265614a7a2670c8ff3dca431be428d3d1af28275a9a23170d8e3b18522c60bff448785c43c6e3d6f7d70fa0188d746
-
SSDEEP
3072:OLe6vh31QIruCee+asuTuRebU7IVILyZQy38YhTfYo+M/Rvs1tlLn:ee6vhaIr1r+asuTuReAvLy738+x+M/RO
Score
7/10
Malware Config
Signatures
-
Deletes itself 1 IoCs
-
Traces itself 2 IoCs
Traces itself to prevent debugging attempts
-
Changes its process name 1 IoCs
-
Writes file to tmp directory 1 IoCs
Malware often drops required files in the /tmp directory.
Processes
-
/tmp/6d3389cc34090cfd940ac38a6bc7ad564a6ca856b40bd0dc100987a9593c756e.elf/tmp/6d3389cc34090cfd940ac38a6bc7ad564a6ca856b40bd0dc100987a9593c756e.elf1⤵
- Deletes itself
- Traces itself
- Changes its process name
- Writes file to tmp directory