Analysis

  • max time kernel
    0s
  • platform
    debian-12_armhf
  • resource
    debian12-armhf-20240221-en
  • resource tags

    arch:armhfimage:debian12-armhf-20240221-enkernel:6.1.0-17-armmp-lpaelocale:en-usos:debian-12-armhfsystem
  • submitted
    30/12/2024, 19:52

Errors

Reason
platform exec: stat /lib/ld-uClibc.so.0: no such file or directory payload error: fork/exec /tmp/kwari.arm5.elf: no such file or directory

General

  • Target

    kwari.arm5.elf

  • Size

    50KB

  • MD5

    3e4728ad90e48284d5a8d3824e868b00

  • SHA1

    fec82956791b06e962a03bbb91f7b4d4f30ac263

  • SHA256

    2e2043217989f3331f28f941cf7124549eaa4d85e6ae74a10398b8e6a76b5cad

  • SHA512

    b8a86b85075bb03e59c3ccff9c4719964433c0d4af169ecd9275001451e4638dfbbbc3eb2194392773d1bb901856139c3ac0b12e4b82313e2b4eb5513320b01d

  • SSDEEP

    1536:RfinNXlMJZdy9imMnjkYm7JSWOCrTO+1gAD2ycCQ5KkzoEOSSSSSSSSSSSSSSSSc:RqnNXiJ09j2y7ezohSSSSSSSSSSSSSSs

Score
1/10

Malware Config

Signatures

Processes

  • /tmp/kwari.arm5.elf
    /tmp/kwari.arm5.elf
    1⤵
      PID:707

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads