439ed3699b1bea25f2d22162e1769cc5d356885ae8a53e4377d3c725b53aad7c | Triage

Submit
Reports

Overview

overview

Static

static

87cfe9e3a0...ee.elf

debian-12-armhf

9

Analysis

max time network
151s
platform
debian-12_armhf
resource
debian12-armhf-20240418-en
resource tags

arch:armhfimage:debian12-armhf-20240418-enkernel:6.1.0-17-armmp-lpaelocale:en-usos:debian-12-armhfsystem
submitted
27-04-2024 13:08

Sharing

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

87cfe9e3a0b06bf2e4f2b1310e6594ee.elf

Resource

debian12-armhf-20240418-en

debian-12-armhf

2 signatures

150 seconds

Report Analysis Logs

General

Target

87cfe9e3a0b06bf2e4f2b1310e6594ee.elf
Size

139KB
MD5

87cfe9e3a0b06bf2e4f2b1310e6594ee
SHA1

b54fb26f71365d6863af8c945f80fb9a41ac6ed5
SHA256

439ed3699b1bea25f2d22162e1769cc5d356885ae8a53e4377d3c725b53aad7c
SHA512

de66bfe5a0b847c7175855fcbc29dee9f21801f3b07335d98c020ba76095c1d230c5a8a344c6d4d23f326deb9aaca3afdb62d59ab42e16e8797a588835b09bd9
SSDEEP

3072:QybUEGniGQYtOR7aCgk9mrsplDKZUmQBKXAVanJX+F8Jyve4hL5AJI4+3jJNx13y:DbUEGniGQYtOR7aPk9mrsplDKZUmQBKB

Score

9^/10

discovery

Malware Config

Signatures

Contacts a large (20500) amount of remote hosts 1 TTPs
This may indicate a network scan to discover remotely running services.
discovery

Network Service Discovery
T1046
Creates a large amount of network flows 1 TTPs
This may indicate a network scan to discover remotely running services.
discovery

Network Service Discovery
T1046

Processes

Network

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Network Service Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Replay Monitor

Loading Replay Monitor...

Downloads

© 2018-2024

Terms | Privacy