Overview

overview

9

Static

static

1

bot.arm7

debian-12-armhf

9

Resubmissions

27/05/2024, 12:48

240527-p15ansea63 9

27/05/2024, 11:07

240527-m8hersac44 9

Sharing

Copy URL Twitter E-mail

General

  • Target

    bot.arm7

  • Size

    96KB

  • Sample

    240527-m8hersac44

  • MD5

    7f0edbd5c17774aace4d45dfb521dce6

  • SHA1

    7f0e400ff01d3e0752b909a8979327c14e05395f

  • SHA256

    afcd4e300eab30a940cf4c062d60f994dc70100310d65ae97569927e3b0376ba

  • SHA512

    52c23cd6c8f3c6632f95c32be16eb101027491708b522f21c137ce13fdb2a80107602f6f6ad62ce71e1b4e43a91990d6e905d1e5c1faaeb8b563a07db8c472b6

  • SSDEEP

    1536:vwnT+TU2RnsXNWM5lxwlvs99/TqKLK+zs3ItNhqN9lxJidpi/mWZxY5cuj:EmVheB5lx/TBLK+zs3ItWOpi/mWnlu

Score
9/10
discovery

Malware Config

Targets

    • Target

      bot.arm7

    • Size

      96KB

    • MD5

      7f0edbd5c17774aace4d45dfb521dce6

    • SHA1

      7f0e400ff01d3e0752b909a8979327c14e05395f

    • SHA256

      afcd4e300eab30a940cf4c062d60f994dc70100310d65ae97569927e3b0376ba

    • SHA512

      52c23cd6c8f3c6632f95c32be16eb101027491708b522f21c137ce13fdb2a80107602f6f6ad62ce71e1b4e43a91990d6e905d1e5c1faaeb8b563a07db8c472b6

    • SSDEEP

      1536:vwnT+TU2RnsXNWM5lxwlvs99/TqKLK+zs3ItNhqN9lxJidpi/mWZxY5cuj:EmVheB5lx/TBLK+zs3ItWOpi/mWnlu

    Score
    9/10
    discovery

    • Contacts a large (921497) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks