Analysis

  • max time network
    154s
  • platform
    debian-12_armhf
  • resource
    debian12-armhf-20240221-en
  • resource tags

    arch:armhfimage:debian12-armhf-20240221-enkernel:6.1.0-17-armmp-lpaelocale:en-usos:debian-12-armhfsystem
  • submitted
    12-03-2024 02:42

General

  • Target

    5dff36c4a9ad2d2a2a0ada5b3e437b072228cf84578dfcb6469449d4da044634.elf

  • Size

    140KB

  • MD5

    849eab00ff07333dd09e56dcb9b3f0d7

  • SHA1

    1a7d18289da60dd8552b16fd06ea62e6f6de14c2

  • SHA256

    5dff36c4a9ad2d2a2a0ada5b3e437b072228cf84578dfcb6469449d4da044634

  • SHA512

    c637f8bceb7bfeb6adbdc95b4ce9c6bbb80c94377612041de9645f27b63446e3bd03cd57275def1678882ed8f6593a927476f7cb4252e01a4b9067ffbe0a016c

  • SSDEEP

    3072:IbvYVCCuwCv38ZaY+lKRzziaCfjSoKGT33T7zYwMM/9CF:IbvYV5uwssZaRlKRzziZjxb3T7zRMM/i

Score
7/10

Malware Config

Signatures

  • Unexpected DNS network traffic destination 33 IoCs

    Network traffic to other servers than the configured DNS servers was detected on the DNS port.

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads