Analysis

  • max time kernel
    153s
  • max time network
    151s
  • platform
    debian-9_armhf
  • resource
    debian9-armhf-20231215-en
  • resource tags

    arch:armhfimage:debian9-armhf-20231215-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem
  • submitted
    20-12-2023 01:45

General

  • Target

    7ac1d77ca6008560eafec01d2910abb3

  • Size

    53KB

  • MD5

    7ac1d77ca6008560eafec01d2910abb3

  • SHA1

    b291315ea21cfcb8b5526cad1557d57aa6416361

  • SHA256

    91260c1126ad8cb7685f1cdb612c3edb12e942e477c13c9519c7fbda2663a98e

  • SHA512

    91fc2d577d85c53ec3ca80fac8867dfe5155a41d3546bcc95d36971de166a85a93a45ec7d1adc1cb12581eec81987ae8a53f70ac8fa17fbf88d97c8b861efa5d

  • SSDEEP

    1536:x3KFiLGHGS5NEHxa8ulU58ir8Gk2SXWt97nbMMwTwlTHpn9WyNUv+yHmg:lKFiLPSQRa8uqk2SXu97n7w8X9K

Score
7/10

Malware Config

Signatures

  • Unexpected DNS network traffic destination 18 IoCs

    Network traffic to other servers than the configured DNS servers was detected on the DNS port.

Processes

  • /tmp/7ac1d77ca6008560eafec01d2910abb3
    /tmp/7ac1d77ca6008560eafec01d2910abb3
    1⤵
      PID:669

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads