a7a903cc8e78b96b4a5f219939b30032dbbf4a20878cffab70db7c9b30e2866d | Triage

Submit
Reports

Overview

overview

Static

static

d11efc2ba3...4ad285

debian-9-armhf

9

Analysis

max time network
156s
platform
debian-9_armhf
resource
debian9-armhf-20231215-en
resource tags

arch:armhfimage:debian9-armhf-20231215-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem
submitted
20-12-2023 15:03

Sharing

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

d11efc2ba3578e6a146a0f10774ad285

Resource

debian9-armhf-20231215-en

debian-9-armhf

2 signatures

150 seconds

Report Analysis Logs

General

Target

d11efc2ba3578e6a146a0f10774ad285
Size

109KB
MD5

d11efc2ba3578e6a146a0f10774ad285
SHA1

e3352f49e4aa5b07c1ecce3b7d9f567ba2e96c4f
SHA256

a7a903cc8e78b96b4a5f219939b30032dbbf4a20878cffab70db7c9b30e2866d
SHA512

31715bab29e33e11b73c1e989385067e84b322721b471b26092d9ae0127574758e39f34527c35119ef315eb787a75819aa06d8ed09484c5fff8bc74be7f01245
SSDEEP

3072:14+j6rwxxCOyNv+xpYNl2O6Piq6L6M/9fVlO7:14+jX7byNv+xp88ninWM/9fVlO7

Score

9^/10

discovery

Malware Config

Signatures

Contacts a large (53973) amount of remote hosts 1 TTPs
This may indicate a network scan to discover remotely running services.
discovery

Network Service Discovery
T1046
Creates a large amount of network flows 1 TTPs
This may indicate a network scan to discover remotely running services.
discovery

Network Service Discovery
T1046

Processes

Network

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Network Service Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Replay Monitor

Loading Replay Monitor...

Downloads

© 2018-2024

Terms | Privacy