General
- Target arm7.elf
- Size 109KB
- Sample260124-29b2psh13a
- SHA256 0f6ff3445145a7603c42abaf51d9c71dbd211890f6b4e5d9ce17e04d55432c06
- MD5 0096643265cf0bd255db51250ca63316
- SHA1 965bbda05d7ba078037e251f21c445d9eb58422b
- SHA512 1cac97e809e3a7378abfe57897bfb189837e4ae7d52d77343815947f1cfea07f9dddb064c7a455e5de4f3002a614225a0061849254133f458f1b9211bb1a6829
- SSDEEP 3072:lPIJKG6tiDmoEzofDZYPAoe1jnec5ogtdGQCAQE/cyEX:2dDOQZ+Anec5ogtdjCAQcc
- MD5 SHA1 SHA512 SSDEEP
Score
9/10
Static task
static1
Behavioral task
behavioral1
Sample
arm7.elf
Resource
debian12-armhf-20251231-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target arm7.elf
- Size 109KB
- SHA256 0f6ff3445145a7603c42abaf51d9c71dbd211890f6b4e5d9ce17e04d55432c06
- MD5 0096643265cf0bd255db51250ca63316
- SHA1 965bbda05d7ba078037e251f21c445d9eb58422b
- SHA512 1cac97e809e3a7378abfe57897bfb189837e4ae7d52d77343815947f1cfea07f9dddb064c7a455e5de4f3002a614225a0061849254133f458f1b9211bb1a6829
- SSDEEP 3072:lPIJKG6tiDmoEzofDZYPAoe1jnec5ogtdGQCAQE/cyEX:2dDOQZ+Anec5ogtdjCAQcc
- MD5 SHA1 SHA512 SSDEEP
Score9/10-
Contacts a large (86851) amount of remote hosts
This may indicate a network scan to discover remotely running services.
-
Creates a large amount of network flows
This may indicate a network scan to discover remotely running services.
-
Deletes itself
-
Executes dropped EXE
-
Enumerates running processes
Discovers information about currently running processes on the system