acd0af25a50661dcf117444b30c3b02618d70f5b4fae6befadb6a2abdacd6be1 | Triage

Submit
Reports

Overview

overview

Static

static

acd0af25a5...e1.elf

debian-12-armhf

9

Analysis

max time network
152s
platform
debian-12_armhf
resource
debian12-armhf-20240221-en
resource tags

arch:armhfimage:debian12-armhf-20240221-enkernel:6.1.0-17-armmp-lpaelocale:en-usos:debian-12-armhfsystem
submitted
09-06-2024 10:28

Sharing

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

acd0af25a50661dcf117444b30c3b02618d70f5b4fae6befadb6a2abdacd6be1.elf

Resource

debian12-armhf-20240221-en

debian-12-armhf

2 signatures

150 seconds

Report Analysis Logs

General

Target

acd0af25a50661dcf117444b30c3b02618d70f5b4fae6befadb6a2abdacd6be1.elf
Size

76KB
MD5

bcaf537f77fc623a71a92fd297faf066
SHA1

7218853e71665c72f0ed3093c5ee0ef6edb1b235
SHA256

acd0af25a50661dcf117444b30c3b02618d70f5b4fae6befadb6a2abdacd6be1
SHA512

bf5035e0df8feb5d219cc16c89af3ff031fac9a9fb0e7507440527601e9b6e8d1f9eafdc991b44d5a145ef9476b7497cba0317e4b02272efdeed7ffd8c186066
SSDEEP

1536:B3nMnwI+neg8vAB27jnEvy94juiciWnt4/16hUj9xpGp1FdlzOTxLXYbgaNoOTX/:ikvUjEvy94juiciWnt4/16hUZupLHzcx

Score

9^/10

discovery

Malware Config

Signatures

Contacts a large (20654) amount of remote hosts 1 TTPs
This may indicate a network scan to discover remotely running services.
discovery

Network Service Discovery
T1046
Creates a large amount of network flows 1 TTPs
This may indicate a network scan to discover remotely running services.
discovery

Network Service Discovery
T1046

Processes

Network

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Network Service Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Replay Monitor

Loading Replay Monitor...

Downloads

© 2018-2024

Terms | Privacy