Overview

overview

9

Static

static

7

arm7.elf

debian-9-armhf

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    arm7.elf

  • Size

    70KB

  • Sample

    240607-mxtcwsgb23

  • MD5

    a998be5b0c1af5dbf66247b406e2f000

  • SHA1

    990f4032c73aee0f84dbe3ea536eed323ec47755

  • SHA256

    0933825decebfa180871ef2faa0331849dcc65ce38450f27487429f9e4d18f46

  • SHA512

    1a30b2bb0050111c233b69b35cf6e405e33251089e80e7b18848f701619273035ddf8427956bdc01647a87d3493f0a88e9454653ceff04726be5ceb6d03d35c0

  • SSDEEP

    1536:RnvpWCUPzHSJM+fh6+619juxTPqPhA2N5GhZgi07z36twc2USxaA7:HWCUP+dfh6+619KBSP+a5GhZZ0H6twBX

Score
9/10
discoveryupx

Malware Config

Targets

    • Target

      arm7.elf

    • Size

      70KB

    • MD5

      a998be5b0c1af5dbf66247b406e2f000

    • SHA1

      990f4032c73aee0f84dbe3ea536eed323ec47755

    • SHA256

      0933825decebfa180871ef2faa0331849dcc65ce38450f27487429f9e4d18f46

    • SHA512

      1a30b2bb0050111c233b69b35cf6e405e33251089e80e7b18848f701619273035ddf8427956bdc01647a87d3493f0a88e9454653ceff04726be5ceb6d03d35c0

    • SSDEEP

      1536:RnvpWCUPzHSJM+fh6+619juxTPqPhA2N5GhZgi07z36twc2USxaA7:HWCUP+dfh6+619KBSP+a5GhZZ0H6twBX

    Score
    9/10
    discovery

    • Contacts a large (133311) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks