c7b130f5b5a0c5d2fa4d202143d40393eccd2bcf563c7496a51ee267dd50bc16

Analysis

max time network
156s
platform
debian-12_armhf
resource
debian12-armhf-20240418-en
resource tags

arch:armhfimage:debian12-armhf-20240418-enkernel:6.1.0-17-armmp-lpaelocale:en-usos:debian-12-armhfsystem
submitted
19-06-2024 01:02

Target

361cd32a750b89857322f54b665f7f8849407ba09074e6303be0f26a351f39b5.elf
Size

71KB
MD5

e010ef511bf5539ee6b966df738ae6af
SHA1

0e8139a0dbf8ac40b9fe803d24d7dfa30b44ca23
SHA256

361cd32a750b89857322f54b665f7f8849407ba09074e6303be0f26a351f39b5
SHA512

29faacf2c96d0d619060ff6f83e1259ae674747607c23ebcfb98168ebf713d6efa750dcab962dfe9f09c1e5c871c62a61ac889198d7475cdb90e7f2cc089852c
SSDEEP

1536:tYr4t+G4eCfOJ1zuxiFkmlUmsOAnP8fF5wArRnBUqTAlgcVzd:6r4t+veJLlUp8nrrdBhTAzd

Score

9^/10

discovery

Contacts a large (95058) amount of remote hosts 1 TTPs
This may indicate a network scan to discover remotely running services.
discovery

Network Service Discovery
T1046
Creates a large amount of network flows 1 TTPs
This may indicate a network scan to discover remotely running services.
discovery

Network Service Discovery
T1046

Unexpected DNS network traffic destination 30 IoCs

Network traffic to other servers than the configured DNS servers was detected on the DNS port.

Processes:

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Network Service Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact