f773d4c417f000b9d5a5e1a1829d46cb9be56cfd6d466bfb77ceced5deab8621

Analysis

max time kernel
110s
max time network
150s
platform
ubuntu-22.04_amd64
resource
ubuntu2204-amd64-20240611-en
resource tags

arch:amd64arch:i386image:ubuntu2204-amd64-20240611-enkernel:5.15.0-105-genericlocale:en-usos:ubuntu-22.04-amd64system
submitted
16-12-2024 09:25

Target

debug.dbg.elf
Size

69KB
MD5

b72d8c3dc38b3d4d692b41bbc72d54b0
SHA1

b7e586a17798966092453f3492d2a94e850efc46
SHA256

f773d4c417f000b9d5a5e1a1829d46cb9be56cfd6d466bfb77ceced5deab8621
SHA512

b887f9bbdc50ae3a1f058219deaccf95ee935ddb8b2225c20806a7adaf9ef018a6d1c4bcc231b3069056b5da1f2b10f4ff424aea63362bd092fa7fcb4a9c65e4
SSDEEP

1536:pnUQJZdRlDAXO6QyQwOaOAOJxsxhP2J7RvsuIr5bh58s:pnUQJ7RlUXTQpwOaOAIxsTPC+uWgs

Score

9^/10

discovery

Contacts a large (38127) amount of remote hosts 1 TTPs
This may indicate a network scan to discover remotely running services.
discovery

Network Service Discovery
T1046
Creates a large amount of network flows 1 TTPs
This may indicate a network scan to discover remotely running services.
discovery

Network Service Discovery
T1046

Changes its process name 1 IoCs

description	ioc	pid	Process
Changes the process name, possibly in an attempt to hide itself	/bin/busybox	1572	debug.dbg.elf

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Network Service Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact