Analysis
-
max time kernel
149s -
max time network
153s -
platform
debian-9_armhf -
resource
debian9-armhf-20240611-en -
resource tags
-
submitted
29-12-2024 12:48
General
-
Target
main_arm.elf
-
Size
130KB
-
MD5
5aab9699f25945625307774db76b53a8
-
SHA1
fd6f439345879b268dcb2a2be35e8ffb28869884
-
SHA256
b9defd499c72b7cf884081eaa704d38c0d2817784cfd8a004fe53411ca8dd54d
-
SHA512
818be921de0216c44dbe245b0f8ca1ec1b39a921bdaddf08dc2162d5ef979fd3735f1399b0acec4fad366ccbd2fc401edb55c1c5ab08fba289fb86188b763aca
-
SSDEEP
1536:YKdzElm18uZJNb4AlFa8eAZHk4VB7fzTTDj97g4ivbGeqZvF20lqiwyw6RNPATqv:YKp50aU8e947Lzj97ziytxFhKdKN
Score
7/10
Malware Config
Signatures
-
Deletes itself 1 IoCs
-
Traces itself 2 IoCs
Traces itself to prevent debugging attempts
-
Changes its process name 1 IoCs
-
Writes file to tmp directory 1 IoCs
Malware often drops required files in the /tmp directory.
Processes
-
/tmp/main_arm.elf/tmp/main_arm.elf1⤵
- Deletes itself
- Traces itself
- Changes its process name
- Writes file to tmp directory