General
-
Target
a4c9bc7e4c200402a227d7167fd1b927214cbccd02c60034ccf852b341b45399
-
Size
15KB
-
Sample
221206-1zlygsgf64
-
MD5
29e93f5700318827e26b42285debe3ea
-
SHA1
f89babf536368dda2c03aa406159c7b271c9d87d
-
SHA256
a4c9bc7e4c200402a227d7167fd1b927214cbccd02c60034ccf852b341b45399
-
SHA512
55322b394c02839728394fca9e30654b166a3477fa6b7ccd5464ed06a64080c99c9271f8e18e14da4adc78c661421bb35a5babffb7eae90d2c39052f16035cfb
-
SSDEEP
384:8s+5F9++9Ef3Lnf29t6tqHrf5bUDbGIFeT0lU3VOL:8s+79++efDM0tFeTMUIL
Static task
static1
Behavioral task
behavioral1
Sample
a4c9bc7e4c200402a227d7167fd1b927214cbccd02c60034ccf852b341b45399
Resource
ubuntu1804-amd64-20221111-en
Behavioral task
behavioral2
Sample
a4c9bc7e4c200402a227d7167fd1b927214cbccd02c60034ccf852b341b45399
Resource
debian9-armhf-en-20211208
Behavioral task
behavioral3
Sample
a4c9bc7e4c200402a227d7167fd1b927214cbccd02c60034ccf852b341b45399
Resource
debian9-mipsbe-en-20211208
Behavioral task
behavioral4
Sample
a4c9bc7e4c200402a227d7167fd1b927214cbccd02c60034ccf852b341b45399
Resource
debian9-mipsel-20221111-en
Malware Config
Targets
-
-
Target
a4c9bc7e4c200402a227d7167fd1b927214cbccd02c60034ccf852b341b45399
-
Size
15KB
-
MD5
29e93f5700318827e26b42285debe3ea
-
SHA1
f89babf536368dda2c03aa406159c7b271c9d87d
-
SHA256
a4c9bc7e4c200402a227d7167fd1b927214cbccd02c60034ccf852b341b45399
-
SHA512
55322b394c02839728394fca9e30654b166a3477fa6b7ccd5464ed06a64080c99c9271f8e18e14da4adc78c661421bb35a5babffb7eae90d2c39052f16035cfb
-
SSDEEP
384:8s+5F9++9Ef3Lnf29t6tqHrf5bUDbGIFeT0lU3VOL:8s+79++efDM0tFeTMUIL
Score7/10-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Writes file to tmp directory
Malware often drops required files in the /tmp directory.
-