Analysis
-
max time kernel
149s -
max time network
150s -
platform
debian-9_armhf -
resource
debian9-armhf-20240729-en -
resource tags
-
submitted
17-12-2024 03:44
General
-
Target
95424da5b789681835df6625c6c38df7752bdaaaf0449977144c71ac51009713.elf
-
Size
177KB
-
MD5
51f236cd7e77c5d2b0203c5395832df5
-
SHA1
e93dfdb2fb4b701192e9cae6cf3db6daca19bf84
-
SHA256
95424da5b789681835df6625c6c38df7752bdaaaf0449977144c71ac51009713
-
SHA512
82c490038716767072791803cc03b7bbddc0d679e01b13518cd0ddafa204725748cf0f69e55ec2bff0fec55da10f68eeb27c3b752225d5e188b9ea00098d7723
-
SSDEEP
3072:OLe6vhfZQIvuCeeuaMuTuRez43IVIL4ZQy38YhTfYo+M/RgDlplLn:ee6vheIv1ruaMuTuReErL4738+x+M/Ro
Score
7/10
Malware Config
Signatures
-
Deletes itself 1 IoCs
-
Traces itself 2 IoCs
Traces itself to prevent debugging attempts
-
Changes its process name 1 IoCs
-
Writes file to tmp directory 1 IoCs
Malware often drops required files in the /tmp directory.
Processes
-
/tmp/95424da5b789681835df6625c6c38df7752bdaaaf0449977144c71ac51009713.elf/tmp/95424da5b789681835df6625c6c38df7752bdaaaf0449977144c71ac51009713.elf1⤵
- Deletes itself
- Traces itself
- Changes its process name
- Writes file to tmp directory