Analysis
-
max time kernel
149s -
max time network
150s -
platform
debian-9_armhf -
resource
debian9-armhf-20240418-en -
resource tags
-
submitted
30-12-2024 01:19
General
-
Target
main_arm5.elf
-
Size
126KB
-
MD5
010f8c315866c7daf154a992f7f19c95
-
SHA1
c513fdb5a7fd6fbd0810085b0e8120c76d91f19b
-
SHA256
5d19d2edfe8cb71b1610b1d2a41fc9fd8b0695f126f10be434c192dbe7d85195
-
SHA512
de1aa9a13b281bf09f43e543b0cc7f7755e3b39e9af1adbb1913bba674e4be46eb2e2de87a32cbfc5febafd8da3046c324847bef67d2ef89fb1aad07dd9d83ac
-
SSDEEP
1536:p3Ka0rG5yC/cMChygtIOBdWFAcJX4VlgXTAjcFAaUGxrf851WhXVVlnKwywEReQu:5KaprMh7GOXWFh4UXwcFAa5xovW5kK4
Score
7/10
Malware Config
Signatures
-
Deletes itself 1 IoCs
-
Traces itself 2 IoCs
Traces itself to prevent debugging attempts
-
Changes its process name 1 IoCs
-
Writes file to tmp directory 1 IoCs
Malware often drops required files in the /tmp directory.
Processes
-
/tmp/main_arm5.elf/tmp/main_arm5.elf1⤵
- Deletes itself
- Traces itself
- Changes its process name
- Writes file to tmp directory