Analysis
-
max time kernel
19720s -
max time network
156s -
platform
linux_armhf -
resource
debian9-armhf-en-20211208 -
resource tags
-
submitted
24-07-2022 22:43
General
-
Target
ea0fc5ac219c6cd3499af4711b37a783bed4f92b14ac8ac9cbe5dcbdb86b11db
-
Size
125KB
-
MD5
e4be5bf4c93ad3484f2e609102a4799b
-
SHA1
bd10975553b04ee4db9864ac227dcc3cafb49641
-
SHA256
ea0fc5ac219c6cd3499af4711b37a783bed4f92b14ac8ac9cbe5dcbdb86b11db
-
SHA512
537780c465e43bff3507867a17e246973ace6e8b9fa4bb30abf7820508f14f734dc4ac0058bd561656e0d0af2f560d0f0a0c712e53482546d8dbd4c3dda3e975
Score
8/10
Malware Config
Signatures
-
Modifies hosts file 1 IoCs
Adds to hosts file used for mapping hosts to IP addresses.
-
Writes DNS configuration 1 TTPs 1 IoCs
Writes data to DNS resolver config file.
Processes
-
/tmp/ea0fc5ac219c6cd3499af4711b37a783bed4f92b14ac8ac9cbe5dcbdb86b11db/tmp/ea0fc5ac219c6cd3499af4711b37a783bed4f92b14ac8ac9cbe5dcbdb86b11db1⤵