Analysis
-
max time kernel
149s -
max time network
152s -
platform
debian-9_armhf -
resource
debian9-armhf-20240611-en -
resource tags
arch:armhfimage:debian9-armhf-20240611-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem -
submitted
26-12-2024 04:52
Behavioral task
behavioral1
Sample
fnkea7.elf
Resource
debian9-armhf-20240611-en
debian-9-armhf
2 signatures
150 seconds
General
-
Target
fnkea7.elf
-
Size
189KB
-
MD5
37f3dd6f97e8fe474cb0ae0f48d21ad3
-
SHA1
340ee3b74b9b9affae20b9d475fc059830812e14
-
SHA256
9685134005bcc071d32aed5be4152611270a021afdca690803ae5bab6b025615
-
SHA512
f6e074285f84a2c252c6a68b685775001d917b9df75b70c932f91b4ebdce9707003bf7e97a553165c52fd545b2853a42b6440e519400ef2086dda8afb79e11e5
-
SSDEEP
3072:TcTMH6p+JwnVIEWEPi7Na+L5tFz+cIDA1i4IWT6iPhDVoFM/RJJkxhO+w:TcTMM+JwyEWS6Na+L5tFp0N4Iy6iP5ik
Score
7/10
Malware Config
Signatures
-
Deletes itself 1 IoCs
pid Process 657 fnkea7.elf -
Changes its process name 1 IoCs
description ioc pid Process Changes the process name, possibly in an attempt to hide itself httpd 656 fnkea7.elf