Analysis
-
max time kernel
153s -
max time network
151s -
platform
debian-9_armhf -
resource
debian9-armhf-20231215-en -
resource tags
arch:armhfimage:debian9-armhf-20231215-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem -
submitted
20-12-2023 01:45
Behavioral task
behavioral1
Sample
7ac1d77ca6008560eafec01d2910abb3
Resource
debian9-armhf-20231215-en
debian-9-armhf
1 signatures
150 seconds
General
-
Target
7ac1d77ca6008560eafec01d2910abb3
-
Size
53KB
-
MD5
7ac1d77ca6008560eafec01d2910abb3
-
SHA1
b291315ea21cfcb8b5526cad1557d57aa6416361
-
SHA256
91260c1126ad8cb7685f1cdb612c3edb12e942e477c13c9519c7fbda2663a98e
-
SHA512
91fc2d577d85c53ec3ca80fac8867dfe5155a41d3546bcc95d36971de166a85a93a45ec7d1adc1cb12581eec81987ae8a53f70ac8fa17fbf88d97c8b861efa5d
-
SSDEEP
1536:x3KFiLGHGS5NEHxa8ulU58ir8Gk2SXWt97nbMMwTwlTHpn9WyNUv+yHmg:lKFiLPSQRa8uqk2SXu97n7w8X9K
Score
7/10
Malware Config
Signatures
-
Unexpected DNS network traffic destination 18 IoCs
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
description ioc Destination IP 84.200.69.80 Destination IP 84.200.69.80 Destination IP 84.200.69.80 Destination IP 84.200.70.40 Destination IP 84.200.69.80 Destination IP 91.239.100.100 Destination IP 84.200.70.40 Destination IP 84.200.69.80 Destination IP 84.200.69.80 Destination IP 84.200.69.80 Destination IP 91.239.100.100 Destination IP 84.200.70.40 Destination IP 84.200.69.80 Destination IP 91.239.100.100 Destination IP 84.200.69.80 Destination IP 84.200.69.80 Destination IP 84.200.70.40 Destination IP 84.200.70.40