629ee7649a2d6fea48f3c0f3bacba8f9f14250531e0f31bfedf5dd3b630bbdb3 | Triage

Submit
Reports

Overview

overview

9

Static

static

1

629ee7649a...b3.elf

debian-12-armhf

9

Analysis

max time network
151s
platform
debian-12_armhf
resource
debian12-armhf-20240418-en
resource tags

arch:armhfimage:debian12-armhf-20240418-enkernel:6.1.0-17-armmp-lpaelocale:en-usos:debian-12-armhfsystem
submitted
21-06-2024 01:17

Sharing

Static task

static1

Behavioral task

behavioral1

Sample

629ee7649a2d6fea48f3c0f3bacba8f9f14250531e0f31bfedf5dd3b630bbdb3.elf

Resource

debian12-armhf-20240418-en

debian-12-armhf

2 signatures

150 seconds

Report Analysis Logs

General

Target

629ee7649a2d6fea48f3c0f3bacba8f9f14250531e0f31bfedf5dd3b630bbdb3.elf
Size

72KB
MD5

0c7b0e49c2147c3ead4991feedef8fb8
SHA1

c5eeed107135e54efb030509b1e57ed4bd063f5c
SHA256

629ee7649a2d6fea48f3c0f3bacba8f9f14250531e0f31bfedf5dd3b630bbdb3
SHA512

f0f055802a22c4b40aa86ccfe1933babedaa0d7b7af2c8bbbe8068ba7fd3cfcbbcaaecd26422d82c7d774d35ef0417c849469e26d21c29950e60343610ffefe2
SSDEEP

1536:ZgnNEAHT9oc7do2p0ctwtWDVEWYJcDNlTOiSU5mAKEz:FAz9Zp9lwtWDVEWY+iU5XPz

Score

9^/10

discovery

Malware Config

Signatures

Contacts a large (112343) amount of remote hosts 1 TTPs
This may indicate a network scan to discover remotely running services.
discovery

Network Service Discovery
T1046
Creates a large amount of network flows 1 TTPs
This may indicate a network scan to discover remotely running services.
discovery

Network Service Discovery
T1046

Processes

Network

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Network Service Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Replay Monitor

Loading Replay Monitor...

Downloads

© 2018-2024

Terms | Privacy