Analysis
-
max time kernel
1s -
max time network
12s -
platform
debian-9_armhf -
resource
debian9-armhf-20240611-en -
resource tags
arch:armhfimage:debian9-armhf-20240611-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem -
submitted
05/03/2025, 07:37
Behavioral task
behavioral1
Sample
jew.arm4.elf
Resource
debian9-armhf-20240611-en
1 signatures
150 seconds
General
-
Target
jew.arm4.elf
-
Size
104KB
-
MD5
5779b93c99baea628b628ce849ef6214
-
SHA1
47c616dd2523a8dcda8fb451cfc224f9b3893daf
-
SHA256
1709b02971823ea8c5c5385764b96ef40f02fed09bde331cb7ff69463fc0a454
-
SHA512
ab7ef20c3db56adde6e9ff05e239db830eb6709416df7b1328f98c788b95f78cd92390caf551e8186009d6f8d4db192381e9ef4cad10b496dde06a5677ba9820
-
SSDEEP
3072:c/1lxkoWAKnzOv1rsRyffIycy/kJ0s8uX/UWHQlyujA0dP:H/Ryn3cy/I/UWHQlyujA0dP
Score
4/10
Malware Config
Signatures
-
Changes its process name 1 IoCs
description pid Process Changes the process name, possibly in an attempt to hide itself 658 jew.arm4.elf