Overview

overview

10

Static

static

10

garm.elf

debian-9-armhf

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    garm.elf

  • Size

    59KB

  • Sample

    241231-lzdjsaxmgq

  • MD5

    f48f64a1d0e56138c3b23c62abb319cc

  • SHA1

    1887079849e13e2bb63d0a4effe3766b168f349c

  • SHA256

    399c7ffb446081836660326ef7e781fc68d0273bcf01e287c1de5f2bd69ecf83

  • SHA512

    03feda7c9449f6a01840cfb161006ae09be5bcaaebac25f5ff4f811a0a281f5ef764eaae5fe84361005f79f4ae7432b259a2c34d49b6b00bb3029969286b870c

  • SSDEEP

    1536:oQSahyiQGrPHGxHw1/2OOt9bk9JtLvBp:oQj6GzGxwdgaPBp

Score
10/10
miraidiscovery

Malware Config

Targets

    • Target

      garm.elf

    • Size

      59KB

    • MD5

      f48f64a1d0e56138c3b23c62abb319cc

    • SHA1

      1887079849e13e2bb63d0a4effe3766b168f349c

    • SHA256

      399c7ffb446081836660326ef7e781fc68d0273bcf01e287c1de5f2bd69ecf83

    • SHA512

      03feda7c9449f6a01840cfb161006ae09be5bcaaebac25f5ff4f811a0a281f5ef764eaae5fe84361005f79f4ae7432b259a2c34d49b6b00bb3029969286b870c

    • SSDEEP

      1536:oQSahyiQGrPHGxHw1/2OOt9bk9JtLvBp:oQj6GzGxwdgaPBp

    Score
    7/10
    discovery

    • Renames itself

    • Enumerates running processes

      Discovers information about currently running processes on the system

    behavioral1

MITRE ATT&CK Matrix

Tasks