3bedec496edb763d2bb99134978f06e25fae6c24b2c07da5f54f61fcf45471f6

Analysis

max time network
149s
platform
debian-9_armhf
resource
debian9-armhf-20240226-en
resource tags

arch:armhfimage:debian9-armhf-20240226-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem
submitted
23-05-2024 01:21

Target

3bedec496edb763d2bb99134978f06e25fae6c24b2c07da5f54f61fcf45471f6.elf
Size

8.1MB
MD5

f9e7e365d564d47e94aa8583ac1f7152
SHA1

357023202ed3092aa2d3b53cae96c2871498a681
SHA256

3bedec496edb763d2bb99134978f06e25fae6c24b2c07da5f54f61fcf45471f6
SHA512

df23c67a48339941f1419aca31ae49e41939f4efe50a575a4bc5032163c62bd21fbc14d4bccc3b72e9502073bb7889bc397cf90bfe96ac77bd6e7f22f7f55090
SSDEEP

98304:ZEMzKQWKiAydzzjUAnbHdcRvPWMFwTUFgD5m8GJw4fl/tHU:ZDszzjUAbHdcpPO4FcNalFU

Score

6^/10

Legitimate hosting services abused for malware hosting/C2 1 TTPs 3 IoCs

Web Service
T1102

Processes:

flow ioc

4 discord.com
5 discord.com
3 discord.com

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Web Service

Impact

Resource Development

Reconnaissance