133eef9eb8df8c867a52a398b3e22831fc1bc55a7165743daee4f4fbe4e16b67

Analysis

max time kernel
149s
max time network
155s
platform
debian-12_armhf
resource
debian12-armhf-20240418-en
resource tags

arch:armhfimage:debian12-armhf-20240418-enkernel:6.1.0-17-armmp-lpaelocale:en-usos:debian-12-armhfsystem
submitted
20/11/2024, 03:51

Target

meow.arm5.elf
Size

88KB
MD5

c316c8954ce0e1a3a224d836a5aeb482
SHA1

cffd9ecd34715025c3cca95b9c1c0a9431938038
SHA256

133eef9eb8df8c867a52a398b3e22831fc1bc55a7165743daee4f4fbe4e16b67
SHA512

012ae21cace23646bba6a077eab6bf52d20bb02282a008f565d3b24b96a21712253c572e6dbfa59f6bd30c57fdba3d75c9a2a31764cdc47bd1c7fc19958f0691
SSDEEP

1536:ifnjM+d4T9SIBm7/cD96xHxqPIHT3xaU17IIqDZccyFh/V6uaERX9dwhT3AfADbQ:MMeYM70kxLT3tjpcyLpRX96hLcUwZpD1

Score

9^/10

discovery

Contacts a large (59668) amount of remote hosts 1 TTPs
This may indicate a network scan to discover remotely running services.
discovery

Network Service Discovery
T1046
Creates a large amount of network flows 1 TTPs
This may indicate a network scan to discover remotely running services.
discovery

Network Service Discovery
T1046

Changes its process name 1 IoCs

description	ioc	pid	Process
Changes the process name, possibly in an attempt to hide itself	init	699	meow.arm5.elf

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Network Service Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact