General

  • Target

    406552637f54c4bcf7a73d26ee3e82bb32c226677c6af55f1118a05f5a9c19a6.elf

  • Size

    80KB

  • Sample

    241110-crs5tswqhz

  • MD5

    bc9ff137fc512243033da78906fcb5d1

  • SHA1

    3994aa2aa14253dc79a3ceb417cd803b4351b413

  • SHA256

    406552637f54c4bcf7a73d26ee3e82bb32c226677c6af55f1118a05f5a9c19a6

  • SHA512

    658ad36a6ec3da1af3ad3db1372dcef7c3abbd28818ffb69819b3c2e30b82e0588817cdf72fae6b6744bb0c48236b6fa3adfdb8e3520f8e4383e6bbdba89797e

  • SSDEEP

    1536:AknaQMW/eMeXgKpBRmBoKp/T03uHaBfDh3iggqlR2iS3Rzu/cZy:7v/eMstpBRioS/A3uHaBfDra3RC/My

Score
9/10

Malware Config

Targets

    • Target

      406552637f54c4bcf7a73d26ee3e82bb32c226677c6af55f1118a05f5a9c19a6.elf

    • Size

      80KB

    • MD5

      bc9ff137fc512243033da78906fcb5d1

    • SHA1

      3994aa2aa14253dc79a3ceb417cd803b4351b413

    • SHA256

      406552637f54c4bcf7a73d26ee3e82bb32c226677c6af55f1118a05f5a9c19a6

    • SHA512

      658ad36a6ec3da1af3ad3db1372dcef7c3abbd28818ffb69819b3c2e30b82e0588817cdf72fae6b6744bb0c48236b6fa3adfdb8e3520f8e4383e6bbdba89797e

    • SSDEEP

      1536:AknaQMW/eMeXgKpBRmBoKp/T03uHaBfDh3iggqlR2iS3Rzu/cZy:7v/eMstpBRioS/A3uHaBfDra3RC/My

    Score
    9/10
    • Contacts a large (92743) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

    • Deletes itself

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Checks hardware identifiers (DMI)

      Checks DMI information which indicate if the system is a virtual machine.

MITRE ATT&CK Enterprise v15

Tasks