Analysis
-
max time kernel
149s -
max time network
145s -
platform
debian-9_armhf -
resource
debian9-armhf-20240611-en -
resource tags
-
submitted
31/12/2024, 02:10
General
-
Target
0b423d1b9e7a9e6719bf77dfa5363998d04f9edad2ee8e2de911c7ae995a391a.elf
-
Size
130KB
-
MD5
994af88b29ff2e3d59e6f45a01cd710b
-
SHA1
df09ce5c42e85924a9d34ea33f865100dad0b813
-
SHA256
0b423d1b9e7a9e6719bf77dfa5363998d04f9edad2ee8e2de911c7ae995a391a
-
SHA512
f1313f8a232711d7bf032577b3c2aea04d42ed0e28d043cf9c2df529c4846bdd6ec9b65191aa226e5e72ee4739cc14bbe101b58e1be910195b062cf98f9b04ad
-
SSDEEP
1536:UFKdzElm18uZJNb4AcFa8eAZHk4VB7fzTTr71igYSvGueqZvd2UlqKwyw6RNPYTR:UFKp50zU8e947Lb71izSftBdRalKo
Score
7/10
Malware Config
Signatures
-
Deletes itself 1 IoCs
-
Traces itself 2 IoCs
Traces itself to prevent debugging attempts
-
Changes its process name 1 IoCs
-
Writes file to tmp directory 1 IoCs
Malware often drops required files in the /tmp directory.
Processes
-
/tmp/0b423d1b9e7a9e6719bf77dfa5363998d04f9edad2ee8e2de911c7ae995a391a.elf/tmp/0b423d1b9e7a9e6719bf77dfa5363998d04f9edad2ee8e2de911c7ae995a391a.elf1⤵
- Deletes itself
- Traces itself
- Changes its process name
- Writes file to tmp directory