Analysis
-
max time kernel
137s -
max time network
148s -
platform
debian-9_armhf -
resource
debian9-armhf-20240729-en -
resource tags
arch:armhfimage:debian9-armhf-20240729-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem -
submitted
10-01-2025 13:25
Behavioral task
behavioral1
Sample
vevhea4.elf
Resource
debian9-armhf-20240729-en
debian-9-armhf
2 signatures
150 seconds
General
-
Target
vevhea4.elf
-
Size
142KB
-
MD5
f1253290b7552b37b062512a86f78393
-
SHA1
b1138b83831d960779cdf7070c152ff016b56617
-
SHA256
6717a34d3a9e62bcb38aa09ec5d9b808b47e43e0e6414d2dec524dc260067bb1
-
SHA512
39e34f6102a1743b6c40da04b8de33f1bd9887aa7e2d17319d613a754a1c74d7d672371bbd4ac2f118a0e5d75c85682372cf0c85228ec62dcb9db39bb40319bf
-
SSDEEP
1536:DUQOZVKFeQShWUpFb2gEmO4VVXXfTE7iViyvDOoQIE9ufCLlh/wywH/yu+Yt/F1I:DUQXIZ9Fb+4jPo7iVj3U0K8zF
Score
7/10
Malware Config
Signatures
-
Deletes itself 1 IoCs
pid Process 640 vevhea4.elf -
Changes its process name 1 IoCs
description ioc pid Process Changes the process name, possibly in an attempt to hide itself httpd 639 vevhea4.elf