Analysis

  • max time kernel
    121s
  • max time network
    124s
  • platform
    debian-9_armhf
  • resource
    debian9-armhf-20240418-en
  • resource tags

    arch:armhfimage:debian9-armhf-20240418-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem
  • submitted
    30-12-2024 02:31

General

  • Target

    95de15b8fc652d35e7be3169c2bae76bb347d4f35fd547b31e5f3e4697a65a90.elf

  • Size

    127KB

  • MD5

    d1c4c00fba7ba4e0606b10fea3c4132d

  • SHA1

    f83bedecd5953577853d73059036eee16c03f4e7

  • SHA256

    95de15b8fc652d35e7be3169c2bae76bb347d4f35fd547b31e5f3e4697a65a90

  • SHA512

    b07382d2352df0e48b628ae88381c9e6b794462e8dbbaf2ddcda3a03a4af89184da155c05c2cbbf7c9c4d778a357618950b88f7c709ae8bc703ce46a342304c4

  • SSDEEP

    3072:hmfdWmd6pUeQKbcISIadimWA2PKj2Gx45hA6qcW8umy/QsYJ0Yj/:Y3IadimiGK5hA6qZmy/QsYJ0Yj/

Score
7/10

Malware Config

Signatures

  • Writes DNS configuration 1 TTPs 1 IoCs

    Writes data to DNS resolver config file.

  • Changes its process name 1 IoCs

Processes

  • /tmp/95de15b8fc652d35e7be3169c2bae76bb347d4f35fd547b31e5f3e4697a65a90.elf
    /tmp/95de15b8fc652d35e7be3169c2bae76bb347d4f35fd547b31e5f3e4697a65a90.elf
    1⤵
    • Writes DNS configuration
    • Changes its process name
    PID:647

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads