Analysis
-
max time kernel
148s -
max time network
159s -
platform
debian-9_armhf -
resource
debian9-armhf-20240611-en -
resource tags
arch:armhfimage:debian9-armhf-20240611-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem -
submitted
05/03/2025, 06:27
Behavioral task
behavioral1
Sample
Okami.arm5.elf
Resource
debian9-armhf-20240611-en
1 signatures
150 seconds
General
-
Target
Okami.arm5.elf
-
Size
95KB
-
MD5
db195461530e8bbc66e4c8d985f78cf4
-
SHA1
2c9c4b2b2e2c3e62c874046673875bc966d208d3
-
SHA256
a16e5e160a2697fbc1bda01ed0e061671d233ba1e9e718bebdf134bf0938f8b1
-
SHA512
9cb82f50a94179babc56b5426e4e7c045ad65e712eb0f9de1c48ffe17db96df7beda59481550ba8e8b80eb82a4037d2854563b0be1a23b301031c31fac063198
-
SSDEEP
1536:QOs8fUOsBA+WuS2BJ1wAR13VKYmJjO/w5hYIXUeRVdAxpPdIufWHeoB/DQUDaLd2:QhOMA+Wu0AbwYm55hYIEeR3+pPdoB/Dn
Score
4/10
Malware Config
Signatures
-
Changes its process name 1 IoCs
description pid Process Changes the process name, possibly in an attempt to hide itself 649 Okami.arm5.elf