Analysis
-
max time kernel
149s -
max time network
150s -
platform
debian-9_armhf -
resource
debian9-armhf-20240611-en -
resource tags
-
submitted
26-12-2024 02:32
General
-
Target
fa8d8f5d442331e82689af088ebca61dbbf099794bd8253b228d0a5725fdaabf.elf
-
Size
130KB
-
MD5
30a4338bf4321c01dff196b724e75855
-
SHA1
01b4aba16c05f9037a669c7457927b422b8c0a36
-
SHA256
fa8d8f5d442331e82689af088ebca61dbbf099794bd8253b228d0a5725fdaabf
-
SHA512
27c0d129442edd70aaa83e561e69004f66902603f2998cbcddfac26a05ba5739a3c10765a9cd0d26e397ae819c88fa8e8f5e356a3bda3428637641af4c6cce06
-
SSDEEP
1536:wKdzElm18uZJNb4AeFa8eAZHk4VB7fzTTfHh+gYSvvqeqZfB20ly+wyw6RNP8TGT:wKp50BU8e947LPHh+zS6thBZ6xKt
Score
7/10
Malware Config
Signatures
-
Deletes itself 1 IoCs
-
Traces itself 2 IoCs
Traces itself to prevent debugging attempts
-
Changes its process name 1 IoCs
-
Writes file to tmp directory 1 IoCs
Malware often drops required files in the /tmp directory.
Processes
-
/tmp/fa8d8f5d442331e82689af088ebca61dbbf099794bd8253b228d0a5725fdaabf.elf/tmp/fa8d8f5d442331e82689af088ebca61dbbf099794bd8253b228d0a5725fdaabf.elf1⤵
- Deletes itself
- Traces itself
- Changes its process name
- Writes file to tmp directory