441e6e38a211e77b07fbb6f55842540dd92f09728e6dba341b39e4f0d918b4a1

Analysis

max time kernel
150s
max time network
154s
platform
debian-9_mips
resource
debian9-mipsbe-20231215-en
resource tags

arch:mipsimage:debian9-mipsbe-20231215-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipssystem
submitted
25/12/2023, 16:08

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

2be5d522750c691535f33ae70a42f9e1
Size

23KB
MD5

2be5d522750c691535f33ae70a42f9e1
SHA1

27b0645053ac5eda7bb9faf61ce549053e804b4c
SHA256

441e6e38a211e77b07fbb6f55842540dd92f09728e6dba341b39e4f0d918b4a1
SHA512

ab6cb3c5866d74225e9ab0bc2374f6bab0fbc9c8974dd7965a681cca639945b9a095ded5eb9a5f5dab95701f4f731a2b1f42e94c54c61bc7fdb39b924524fd7c
SSDEEP

384:J/jrLpBZVktnEcKA+CwrKJYJdSfRkawn9rzDxL2Q/so+IoJgGlzDpx+73sq:V/tBErKKuK/orfN2gsHIoJgGlzDpxYsq

Score

9^/10

discovery

Malware Config

Signatures

Contacts a large (53425) amount of remote hosts 1 TTPs
This may indicate a network scan to discover remotely running services.
discovery

Network Service Discovery
T1046
Creates a large amount of network flows 1 TTPs
This may indicate a network scan to discover remotely running services.
discovery

Network Service Discovery
T1046

Deletes itself 1 IoCs

pid	Process
704	2be5d522750c691535f33ae70a42f9e1

Reads runtime system information 1 IoCs

Reads data from /proc virtual filesystem.

description	ioc	Process
File opened for reading	/proc/self/exe	2be5d522750c691535f33ae70a42f9e1

/tmp/2be5d522750c691535f33ae70a42f9e1
/tmp/2be5d522750c691535f33ae70a42f9e1
1⤵
- Deletes itself
- Reads runtime system information
PID:704

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Network Service Discovery

T1046

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Windows 7 deprecation

Loading Replay Monitor...