Analysis

  • max time network
    140s
  • platform
    debian-12_armhf
  • resource
    debian12-armhf-20240418-en
  • resource tags

    arch:armhfimage:debian12-armhf-20240418-enkernel:6.1.0-17-armmp-lpaelocale:en-usos:debian-12-armhfsystem
  • submitted
    30-04-2024 09:22

General

  • Target

    SecuriteInfo.com.Other.Malware-gen.1042.16050.elf

  • Size

    46KB

  • MD5

    42d7ebf9d9e1d77563199990d141f874

  • SHA1

    7709f83e7311dabbdca55445adf36d8ae3d753e8

  • SHA256

    d2381ea5346c0ea82db94dbf042b009338e50b05b4e48e510044129dd66d5a67

  • SHA512

    9f2841451d1b31078908478c91737ce43f5ef0e0de0345a0b307ec51031fb212658d63ab5fa8bae219f72a2b530a71dc5bcbcc93cfa7c2bc2cdde1a2b0bd63a5

  • SSDEEP

    768:2oFOHTFETPVt4rjdRsx8iEtoAb3zA53A/8BTdBPWKBMOtEQkrx1IXq3Uo8:iuEziErjm3AEB5nBMOtEQkkb

Score
7/10

Malware Config

Signatures

  • Unexpected DNS network traffic destination 41 IoCs

    Network traffic to other servers than the configured DNS servers was detected on the DNS port.

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads