Analysis
- max time kernel
151s - max time network
150s - platform
debian-9_mipsel - resource
debian9-mipsel-20231215-en - resource tags
arch:mipselimage:debian9-mipsel-20231215-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipselsystem - submitted
20/12/2023, 03:38
Behavioral task
behavioral1
Sample
819d362840a1da8d8db9ccd3c028aeef
Resource
debian9-mipsel-20231215-en
1 signatures
150 seconds
General
- Target 819d362840a1da8d8db9ccd3c028aeef
- Size 70KB
- Sample231220-d7dkradfd5
- SHA256 330fb97b3bcb3db9272b8416c5f41cb9fa14b167b2e0523b0646b136a1c70d9e
- MD5 819d362840a1da8d8db9ccd3c028aeef
- SHA1 f368fc73f30bd2aef074f002873e822fbef45b6a
- SHA512 f50bc89438f2d43f53adac97c6d3dce5ee6252a770a5aa29f2d8dd7e7c081850320a26f3c5ebfb54e9b2d424b35764ad681e5668072f153704571a5b3ba756d8
- SSDEEP 1536:HhGY5fPrEdMbUHyFs4vV07V7GGaQon2qIhklQa6qY8wkOSuaYsGFt24K3s1Zoy+9:Hda9dDon2qIhklQa6qY8wkOSuak1O0
- MD5 SHA1 SHA512 SSDEEP
Score
7/10
Malware Config
Signatures
- Unexpected DNS network traffic destination 17 IoCs
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
description ioc Destination IP 84.200.69.80 Destination IP 84.200.69.80 Destination IP 84.200.70.40 Destination IP 84.200.69.80 Destination IP 84.200.70.40 Destination IP 84.200.70.40 Destination IP 84.200.70.40 Destination IP 84.200.69.80 Destination IP 84.200.69.80 Destination IP 84.200.69.80 Destination IP 84.200.70.40 Destination IP 91.239.100.100 Destination IP 84.200.69.80 Destination IP 84.200.69.80 Destination IP 91.239.100.100 Destination IP 84.200.69.80 Destination IP 84.200.69.80