General

  • Target

    de3f739303636fe0c66b19b7b1e4c177397a789a2a646e73a86b303d5ac65b35.elf

  • Size

    177KB

  • Sample

    241208-damgdsylcx

  • MD5

    4ad148703b46bdb76791128c01180e52

  • SHA1

    be40b4e7d1c2b38d48252ac886573824a051731a

  • SHA256

    de3f739303636fe0c66b19b7b1e4c177397a789a2a646e73a86b303d5ac65b35

  • SHA512

    ec0c151ff89381515c99108da9e85d61a2092ac06c75c778fede6deeb86b8e2fd5fcb306502ea5e6d88e56c5166c19ebc8d8ec9bbe429053e17fa68cc69aeac5

  • SSDEEP

    3072:v6uSXvJnzjP0jW0zpyi579Yxy52tIen9A6qewZQ90n8:v6uSXvJnvP060z4igAEnfqnZ+08

Score
10/10

Malware Config

Targets

    • Target

      de3f739303636fe0c66b19b7b1e4c177397a789a2a646e73a86b303d5ac65b35.elf

    • Size

      177KB

    • MD5

      4ad148703b46bdb76791128c01180e52

    • SHA1

      be40b4e7d1c2b38d48252ac886573824a051731a

    • SHA256

      de3f739303636fe0c66b19b7b1e4c177397a789a2a646e73a86b303d5ac65b35

    • SHA512

      ec0c151ff89381515c99108da9e85d61a2092ac06c75c778fede6deeb86b8e2fd5fcb306502ea5e6d88e56c5166c19ebc8d8ec9bbe429053e17fa68cc69aeac5

    • SSDEEP

      3072:v6uSXvJnzjP0jW0zpyi579Yxy52tIen9A6qewZQ90n8:v6uSXvJnvP060z4igAEnfqnZ+08

    Score
    9/10
    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Enumerates running processes

      Discovers information about currently running processes on the system

MITRE ATT&CK Enterprise v15

Tasks