Analysis
-
max time network
147s -
platform
debian-12_armhf -
resource
debian12-armhf-20240418-en -
resource tags
arch:armhfimage:debian12-armhf-20240418-enkernel:6.1.0-17-armmp-lpaelocale:en-usos:debian-12-armhfsystem -
submitted
01-05-2024 01:59
Static task
static1
Behavioral task
behavioral1
Sample
d2381ea5346c0ea82db94dbf042b009338e50b05b4e48e510044129dd66d5a67.elf
Resource
debian12-armhf-20240418-en
debian-12-armhf
1 signatures
150 seconds
General
-
Target
d2381ea5346c0ea82db94dbf042b009338e50b05b4e48e510044129dd66d5a67.elf
-
Size
46KB
-
MD5
42d7ebf9d9e1d77563199990d141f874
-
SHA1
7709f83e7311dabbdca55445adf36d8ae3d753e8
-
SHA256
d2381ea5346c0ea82db94dbf042b009338e50b05b4e48e510044129dd66d5a67
-
SHA512
9f2841451d1b31078908478c91737ce43f5ef0e0de0345a0b307ec51031fb212658d63ab5fa8bae219f72a2b530a71dc5bcbcc93cfa7c2bc2cdde1a2b0bd63a5
-
SSDEEP
768:2oFOHTFETPVt4rjdRsx8iEtoAb3zA53A/8BTdBPWKBMOtEQkrx1IXq3Uo8:iuEziErjm3AEB5nBMOtEQkkb
Score
7/10
Malware Config
Signatures
-
Unexpected DNS network traffic destination 49 IoCs
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
Processes:
description ioc Destination IP 81.169.136.222 Destination IP 178.254.22.166 Destination IP 51.77.149.139 Destination IP 134.195.4.2 Destination IP 81.169.136.222 Destination IP 81.169.136.222 Destination IP 134.195.4.2 Destination IP 94.16.114.254 Destination IP 178.254.22.166 Destination IP 51.77.149.139 Destination IP 195.10.195.195 Destination IP 81.169.136.222 Destination IP 195.10.195.195 Destination IP 134.195.4.2 Destination IP 195.10.195.195 Destination IP 178.254.22.166 Destination IP 1.0.0.1 Destination IP 1.0.0.1 Destination IP 94.16.114.254 Destination IP 134.195.4.2 Destination IP 51.77.149.139 Destination IP 134.195.4.2 Destination IP 1.0.0.1 Destination IP 51.77.149.139 Destination IP 178.254.22.166 Destination IP 178.254.22.166 Destination IP 94.16.114.254 Destination IP 178.254.22.166 Destination IP 178.254.22.166 Destination IP 51.158.108.203 Destination IP 195.10.195.195 Destination IP 1.0.0.1 Destination IP 134.195.4.2 Destination IP 178.254.22.166 Destination IP 178.254.22.166 Destination IP 134.195.4.2 Destination IP 178.254.22.166 Destination IP 1.0.0.1 Destination IP 1.0.0.1 Destination IP 94.16.114.254 Destination IP 81.169.136.222 Destination IP 134.195.4.2 Destination IP 134.195.4.2 Destination IP 195.10.195.195 Destination IP 94.16.114.254 Destination IP 51.77.149.139 Destination IP 1.0.0.1 Destination IP 1.0.0.1 Destination IP 134.195.4.2