5f4a5f8c6ef02f76b5d21981c4093294ec243535dfe1142a807fa5623a6c6576

Analysis

max time kernel
0s
max time network
146s
platform
linux_armhf
resource
debian9-armhf-en-20211208
resource tags

arch:armhfimage:debian9-armhf-en-20211208kernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem
submitted
26-03-2023 05:46

Target

f2e6dbc30a20ad25240e11aaabc888a9.elf
Size

125KB
MD5

f2e6dbc30a20ad25240e11aaabc888a9
SHA1

12bb7d3b39242633ff703b09c4ebd171b2f40205
SHA256

5f4a5f8c6ef02f76b5d21981c4093294ec243535dfe1142a807fa5623a6c6576
SHA512

21c2868335d07f2193831b86dbc2963ff1d85d18e106fc9326ad7b9f4c8fc52742a77de2cecf242fd61acca311e8fb8b38b2981b69cfd084298fab1047f3f2df
SSDEEP

3072:YvGS3Lu/zHaId0+43lV5kokeqbOI6ZNmy2QyESuunz:YBi/LaK0+MkneqbOIumy2QyE3unz

Score

8^/10

Modifies hosts file 1 IoCs

Adds to hosts file used for mapping hosts to IP addresses.

description	ioc
/etc/hosts	/etc/hosts

Writes DNS configuration 1 TTPs 1 IoCs

Writes data to DNS resolver config file.

Dynamic Resolution

description	ioc
/etc/resolv.conf	/etc/resolv.conf

/tmp/f2e6dbc30a20ad25240e11aaabc888a9.elf
/tmp/f2e6dbc30a20ad25240e11aaabc888a9.elf
1⤵
PID:363

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Dynamic Resolution

Exfiltration

Impact