dc0419c83aa3d38ae5401f61f9204802612e0b41141990247a0ead895bfdbaa9

Analysis

max time network
154s
platform
debian-9_armhf
resource
debian9-armhf-20240226-en
resource tags

arch:armhfimage:debian9-armhf-20240226-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem
submitted
28-05-2024 07:11

Target

sh
Size

1KB
MD5

4edff0f13902d3b9d340a647d0a2e8d5
SHA1

041b147b3f23973f42907b15ca9800130e533ca1
SHA256

dc0419c83aa3d38ae5401f61f9204802612e0b41141990247a0ead895bfdbaa9
SHA512

fb25064ed1bc89bb6635e69a1959fb89504fb4eb86f12b77a7b993300d60ec8bf55a1259c774afebeb9c8d34f755183904315d0bae75ff23d2a7b03ebff4329b

Score

9^/10

discovery

Contacts a large (218918) amount of remote hosts 1 TTPs
This may indicate a network scan to discover remotely running services.
discovery

Network Service Discovery
T1046
Creates a large amount of network flows 1 TTPs
This may indicate a network scan to discover remotely running services.
discovery

Network Service Discovery
T1046

Unexpected DNS network traffic destination 6 IoCs

Network traffic to other servers than the configured DNS servers was detected on the DNS port.

Processes:

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Network Service Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact