f8b0dae839257b246809276f1798ea96cb264b661fc069f74b3353151699d970 | Triage

Submit
Reports

Overview

overview

Static

static

51944e9aa9...d5.elf

debian-12-armhf

9

Analysis

max time network
153s
platform
debian-12_armhf
resource
debian12-armhf-20240221-en
resource tags

arch:armhfimage:debian12-armhf-20240221-enkernel:6.1.0-17-armmp-lpaelocale:en-usos:debian-12-armhfsystem
submitted
22/02/2024, 11:18

Sharing

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

51944e9aa9c9be322a472e14050719d5.elf

Resource

debian12-armhf-20240221-en

debian-12-armhf

2 signatures

150 seconds

Report Analysis Logs

General

Target

51944e9aa9c9be322a472e14050719d5.elf
Size

147KB
MD5

51944e9aa9c9be322a472e14050719d5
SHA1

27e47e68a8574d55711fcd456d60bb25f85bafca
SHA256

f8b0dae839257b246809276f1798ea96cb264b661fc069f74b3353151699d970
SHA512

e7bc2737d67b227c3fd8d16698e9097c5e66234236dddc13ddd75843a3134920ea373307caa2b7dc0d35095b1c76be246a58fd63b56043112562313dc0c9c36c
SSDEEP

3072:CJLce3pC5mz7/abHbz4NpaIJ8VIJ1FvUXkkTM/9cHMY:CJLcev/abHbz4NUIJxHvUXkYM/9gMY

Score

9^/10

discovery

Malware Config

Signatures

Contacts a large (35596) amount of remote hosts 1 TTPs
This may indicate a network scan to discover remotely running services.
discovery

Network Service Discovery
T1046
Creates a large amount of network flows 1 TTPs
This may indicate a network scan to discover remotely running services.
discovery

Network Service Discovery
T1046

Processes

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Network Service Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

© 2018-2025

Terms | Privacy