Overview

overview

10

Static

static

10

5df4e0a3d2...8c.elf

debian-12-armhf

7

Analysis

  • max time kernel
    136s
  • max time network
    162s
  • platform
    debian-12_armhf
  • resource
    debian12-armhf-20240221-en
  • resource tags

    arch:armhfimage:debian12-armhf-20240221-enkernel:6.1.0-17-armmp-lpaelocale:en-usos:debian-12-armhfsystem
  • submitted
    05-01-2025 02:16

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    5df4e0a3d22be0f4343217c58255d662ec1409c35d183bac4681d77d1e7f488c.elf

  • Size

    188KB

  • MD5

    d2da00b7f852fc6e9703fa9b0860fc9b

  • SHA1

    defa63c0187a398d000dd179eb2ac820fba469e1

  • SHA256

    5df4e0a3d22be0f4343217c58255d662ec1409c35d183bac4681d77d1e7f488c

  • SHA512

    4cb7a42e5e1b36d02134dca65759b854bc540e7ee1230d42d6bf917e18befa37ba30eea588e33e5481a1712a1b3865187f0f4fb4f2ae58ca4a4800e5c4081bda

  • SSDEEP

    3072:lX6y+GCzsxAXCITPGr9GeMaScsSDyWVUZp5F1pXUXooL9M/RYIVTG:lX6y+RzsxjITPgstaScsSD/aF1pXIVLV

Score
7/10
discovery

Malware Config

Signatures

  • Deletes itself 1 IoCs
  • Changes its process name 1 IoCs
  • Reads runtime system information 1 IoCs

    Reads data from /proc virtual filesystem.

    discovery

Processes

  • /tmp/5df4e0a3d22be0f4343217c58255d662ec1409c35d183bac4681d77d1e7f488c.elf
    /tmp/5df4e0a3d22be0f4343217c58255d662ec1409c35d183bac4681d77d1e7f488c.elf
    1⤵
    • Deletes itself
    • Changes its process name
    • Reads runtime system information
    PID:708

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads