Analysis
-
max time kernel
149s -
max time network
150s -
platform
debian-9_armhf -
resource
debian9-armhf-20240729-en -
resource tags
-
submitted
26-12-2024 02:05
General
-
Target
2aad3df689a1386f653b20407a6792dd33fde45005a9da5e1d2fb5ba37fa3626.elf
-
Size
126KB
-
MD5
3af21b78a4e972c25bba907ce6859ebe
-
SHA1
5016209c7e5b7dd5350588ecd90ff3b2df1724ee
-
SHA256
2aad3df689a1386f653b20407a6792dd33fde45005a9da5e1d2fb5ba37fa3626
-
SHA512
9d8f437168dc2bca28feab68ce0aa335cce7df7595838b363ba1d6b6407bf95c94b3ae2829be1aeea7851339a45a5deef73722b25a706c9ce8bdfa4032019f42
-
SSDEEP
1536:p3Ka0rG5yC/cMChygtxOBdWFAcJX4VlgXTAjcFAaUGxrf851WhXVVlnKwywEReQB:5KaprMh7XOXWFh4UXwcFAa5xovW5kKt
Score
7/10
Malware Config
Signatures
-
Deletes itself 1 IoCs
-
Traces itself 2 IoCs
Traces itself to prevent debugging attempts
-
Changes its process name 1 IoCs
-
Writes file to tmp directory 1 IoCs
Malware often drops required files in the /tmp directory.
Processes
-
/tmp/2aad3df689a1386f653b20407a6792dd33fde45005a9da5e1d2fb5ba37fa3626.elf/tmp/2aad3df689a1386f653b20407a6792dd33fde45005a9da5e1d2fb5ba37fa3626.elf1⤵
- Deletes itself
- Traces itself
- Changes its process name
- Writes file to tmp directory