Analysis
-
max time kernel
145s -
max time network
147s -
platform
debian-9_armhf -
resource
debian9-armhf-20240611-en -
resource tags
arch:armhfimage:debian9-armhf-20240611-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem -
submitted
11-01-2025 22:47
Behavioral task
behavioral1
Sample
yakuza.arm6.elf
Resource
debian9-armhf-20240611-en
1 signatures
150 seconds
General
-
Target
yakuza.arm6.elf
-
Size
127KB
-
MD5
0da81108dda7493e0ff5bc8e01164c42
-
SHA1
3c7959cec2bc5127407acad96abf139d1dbbd832
-
SHA256
e6bea407a142b201a325e4ad82e43403885f5c0f9329f0f42baa91e935d5095c
-
SHA512
c9bac5d51c416862b057d1830015f7dda5ce19f378e12ef2b47e0d5cf976e7f8baf796c63ce5ccd3918e80bb03aec235f41fba10f6e91b433547fbfc0d994267
-
SSDEEP
3072:di+fUdGdhpceQAYf2OJaHCDWP2bWj8MJ45h8yqGG8aBszafmy/QsYu0Yj/:dANJaHCDJMi5h8yqIaRmy/QsYu0Yj/
Score
4/10
Malware Config
Signatures
-
Changes its process name 1 IoCs
description pid Process Changes the process name, possibly in an attempt to hide itself 658 yakuza.arm6.elf