Analysis
-
max time kernel
139s -
max time network
136s -
platform
debian-9_armhf -
resource
debian9-armhf-20240418-en -
resource tags
arch:armhfimage:debian9-armhf-20240418-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem -
submitted
26-12-2024 05:03
Behavioral task
behavioral1
Sample
fnkea7.elf
Resource
debian9-armhf-20240418-en
debian-9-armhf
2 signatures
150 seconds
General
-
Target
fnkea7.elf
-
Size
189KB
-
MD5
37f3dd6f97e8fe474cb0ae0f48d21ad3
-
SHA1
340ee3b74b9b9affae20b9d475fc059830812e14
-
SHA256
9685134005bcc071d32aed5be4152611270a021afdca690803ae5bab6b025615
-
SHA512
f6e074285f84a2c252c6a68b685775001d917b9df75b70c932f91b4ebdce9707003bf7e97a553165c52fd545b2853a42b6440e519400ef2086dda8afb79e11e5
-
SSDEEP
3072:TcTMH6p+JwnVIEWEPi7Na+L5tFz+cIDA1i4IWT6iPhDVoFM/RJJkxhO+w:TcTMM+JwyEWS6Na+L5tFp0N4Iy6iP5ik
Score
7/10
Malware Config
Signatures
-
Deletes itself 1 IoCs
pid Process 661 fnkea7.elf -
Changes its process name 1 IoCs
description ioc pid Process Changes the process name, possibly in an attempt to hide itself httpd 660 fnkea7.elf