Analysis

  • max time kernel
    137s
  • max time network
    148s
  • platform
    debian-9_armhf
  • resource
    debian9-armhf-20240729-en
  • resource tags

    arch:armhfimage:debian9-armhf-20240729-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem
  • submitted
    10-01-2025 13:25

General

  • Target

    vevhea4.elf

  • Size

    142KB

  • MD5

    f1253290b7552b37b062512a86f78393

  • SHA1

    b1138b83831d960779cdf7070c152ff016b56617

  • SHA256

    6717a34d3a9e62bcb38aa09ec5d9b808b47e43e0e6414d2dec524dc260067bb1

  • SHA512

    39e34f6102a1743b6c40da04b8de33f1bd9887aa7e2d17319d613a754a1c74d7d672371bbd4ac2f118a0e5d75c85682372cf0c85228ec62dcb9db39bb40319bf

  • SSDEEP

    1536:DUQOZVKFeQShWUpFb2gEmO4VVXXfTE7iViyvDOoQIE9ufCLlh/wywH/yu+Yt/F1I:DUQXIZ9Fb+4jPo7iVj3U0K8zF

Score
7/10

Malware Config

Signatures

  • Deletes itself 1 IoCs
  • Changes its process name 1 IoCs

Processes

  • /tmp/vevhea4.elf
    /tmp/vevhea4.elf
    1⤵
    • Deletes itself
    • Changes its process name
    PID:639

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads