Analysis
-
max time network
154s -
platform
debian-12_armhf -
resource
debian12-armhf-20240221-en -
resource tags
arch:armhfimage:debian12-armhf-20240221-enkernel:6.1.0-17-armmp-lpaelocale:en-usos:debian-12-armhfsystem -
submitted
12-03-2024 02:42
Behavioral task
behavioral1
Sample
5dff36c4a9ad2d2a2a0ada5b3e437b072228cf84578dfcb6469449d4da044634.elf
Resource
debian12-armhf-20240221-en
debian-12-armhf
1 signatures
150 seconds
General
-
Target
5dff36c4a9ad2d2a2a0ada5b3e437b072228cf84578dfcb6469449d4da044634.elf
-
Size
140KB
-
MD5
849eab00ff07333dd09e56dcb9b3f0d7
-
SHA1
1a7d18289da60dd8552b16fd06ea62e6f6de14c2
-
SHA256
5dff36c4a9ad2d2a2a0ada5b3e437b072228cf84578dfcb6469449d4da044634
-
SHA512
c637f8bceb7bfeb6adbdc95b4ce9c6bbb80c94377612041de9645f27b63446e3bd03cd57275def1678882ed8f6593a927476f7cb4252e01a4b9067ffbe0a016c
-
SSDEEP
3072:IbvYVCCuwCv38ZaY+lKRzziaCfjSoKGT33T7zYwMM/9CF:IbvYV5uwssZaRlKRzziZjxb3T7zRMM/i
Score
7/10
Malware Config
Signatures
-
Unexpected DNS network traffic destination 33 IoCs
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
Processes:
description ioc Destination IP 81.169.136.222 Destination IP 35.211.96.150 Destination IP 35.211.96.150 Destination IP 35.211.96.150 Destination IP 51.254.162.59 Destination IP 130.61.69.123 Destination IP 194.36.144.87 Destination IP 194.36.144.87 Destination IP 51.254.162.59 Destination IP 194.36.144.87 Destination IP 35.211.96.150 Destination IP 70.34.254.19 Destination IP 35.211.96.150 Destination IP 81.169.136.222 Destination IP 35.211.96.150 Destination IP 70.34.254.19 Destination IP 70.34.254.19 Destination IP 194.36.144.87 Destination IP 81.169.136.222 Destination IP 81.169.136.222 Destination IP 35.211.96.150 Destination IP 194.36.144.87 Destination IP 70.34.254.19 Destination IP 35.211.96.150 Destination IP 35.211.96.150 Destination IP 70.34.254.19 Destination IP 64.176.6.48 Destination IP 51.254.162.59 Destination IP 51.254.162.59 Destination IP 51.254.162.59 Destination IP 81.169.136.222 Destination IP 35.211.96.150 Destination IP 70.34.254.19