Analysis
-
max time kernel
149s -
max time network
153s -
platform
debian-12_armhf -
resource
debian12-armhf-20240729-en -
resource tags
arch:armhfimage:debian12-armhf-20240729-enkernel:6.1.0-17-armmp-lpaelocale:en-usos:debian-12-armhfsystem -
submitted
22-01-2025 02:52
Behavioral task
behavioral1
Sample
85a8357dfb25fd0a269f0d16d2ee1888f6952019b26394e55bc0980f50d42c29.elf
Resource
debian12-armhf-20240729-en
debian-12-armhf
2 signatures
150 seconds
General
-
Target
85a8357dfb25fd0a269f0d16d2ee1888f6952019b26394e55bc0980f50d42c29.elf
-
Size
122KB
-
MD5
f5ff339b07710fbb5fc3e2842180aa72
-
SHA1
04a42c7e549c1c85bf7955f3beea316e0bb69a99
-
SHA256
85a8357dfb25fd0a269f0d16d2ee1888f6952019b26394e55bc0980f50d42c29
-
SHA512
579948b1332b08f5bd038797307ed3f4786a3893ddccd36943fd24f4def9261ef7baca7aaddc4d691fa385f95fc32282d31e4caea05fc3c4999b4faf610c8cfb
-
SSDEEP
3072:JyxVJ8bsBnbhqnUuFcpQLKZVEWs+eL4M/9h6z:Jyxgb8nbh2UuFcpQqVS+e8M/90z
Score
7/10
Malware Config
Signatures
-
Deletes itself 1 IoCs
pid Process 712 85a8357dfb25fd0a269f0d16d2ee1888f6952019b26394e55bc0980f50d42c29.elf -
Changes its process name 1 IoCs
description ioc pid Process Changes the process name, possibly in an attempt to hide itself b36knji1mah1nnkslhbj 712 85a8357dfb25fd0a269f0d16d2ee1888f6952019b26394e55bc0980f50d42c29.elf