Analysis
-
max time kernel
1035s -
max time network
153s -
platform
debian-9_armhf -
resource
debian9-armhf-20221111-en -
resource tags
-
submitted
23-11-2022 15:48
General
-
Target
1c9536ae74850d81225a46c7f503fdc79df79c23fb34f4bb5fd0c0dc6285f7a6
-
Size
15KB
-
MD5
614d98ac77b9c15815cd31cfcf7840b3
-
SHA1
1e521cb22b27fd0d801a9176ca7d6adcd5bf3821
-
SHA256
1c9536ae74850d81225a46c7f503fdc79df79c23fb34f4bb5fd0c0dc6285f7a6
-
SHA512
9cfc6c092ab2942f6eec8557d1d50bf4e6fea8816c7ba5ce3d5d329c4c1970029a238018fa8ab4cc053686dc2a4ccef0737866205eaa953b634f0b36e7cee9b0
-
SSDEEP
384:ksHYFy+gLES3LnfX9t6tUHef5bUDbGIFgTG10U5VOj:ksHky+gPfyGttFgTY0Nj
Score
6/10
Malware Config
Signatures
-
Creates a large amount of network flows 1 TTPs
This may indicate a network scan to discover remotely running services.
-
Writes file to tmp directory 1 IoCs
Malware often drops required files in the /tmp directory.
Processes
-
/tmp/1c9536ae74850d81225a46c7f503fdc79df79c23fb34f4bb5fd0c0dc6285f7a6/tmp/1c9536ae74850d81225a46c7f503fdc79df79c23fb34f4bb5fd0c0dc6285f7a61⤵
- Writes file to tmp directory