3cbf8933feb7f5a451f5c233543a1964714db2e41318d14ea3b6aa7003c3ed97

Analysis

Target
arm7-20220501-2200
Size 50KB
Sample220501-1w7qsaagcl
SHA256 3cbf8933feb7f5a451f5c233543a1964714db2e41318d14ea3b6aa7003c3ed97
MD5 0c34167eb4aceb622911fbb260256212
SHA1 aeca537c172c3906b3cfd261bc9abfac82d5a69b
SHA512 90284f2b00927d06f69750af744e384ab01803ba1f10ffca33d300d0fe95ecfd840a078c6436edeb9ccd98ddc4eb2deadc94f44b338ead33117e588c0dcc3532
MD5 SHA1 SHA512

Score

9^/10

discovery

Contacts a large (94435) amount of remote hosts 1 TTPs
This may indicate a network scan to discover remotely running services.
discovery

Network Service Scanning
T1046
Creates a large amount of network flows 1 TTPs
This may indicate a network scan to discover remotely running services.
discovery

Network Service Scanning
T1046

Reads runtime system information 1 IoCs

Reads data from /proc virtual filesystem.

description	ioc	Process
/proc/self/exe	/proc/self/exe	arm7-20220501-2200

./arm7-20220501-2200
./arm7-20220501-2200
1⤵
- Reads runtime system information
PID:353

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Network Service Scanning

Lateral Movement

Collection

Command and Control

Exfiltration

Impact