Overview

overview

9

Static

static

1

arm6.elf

debian-9-armhf

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    arm6.elf

  • Size

    116KB

  • Sample

    250328-dpth9a1way

  • MD5

    77f104113a436d31bd2008db5e335f57

  • SHA1

    8db8ca3c9944f2daed4ca08516f634b85f21ed2a

  • SHA256

    564059ffc1215f072196d19674d6cebdf7496abe17a6ff56fc540cd4d2f67431

  • SHA512

    0e6657613caa3ea9dc6bce89c015a2d98b7bc64c60f0fd93c8de9a55894d0357c543de68183d014d20f46c9dd364f88a487cd505fadb62163889382b3df1cf1e

  • SSDEEP

    3072:UwKjJ2vr1SVt5hGG/hoH0QkITZgL0ZuBRYWaznON1jYnr:UZJ2vr1SVt5hG+42IC6IRYBzq1I

Score
9/10
credential_accessdiscovery

Malware Config

Targets

    • Target

      arm6.elf

    • Size

      116KB

    • MD5

      77f104113a436d31bd2008db5e335f57

    • SHA1

      8db8ca3c9944f2daed4ca08516f634b85f21ed2a

    • SHA256

      564059ffc1215f072196d19674d6cebdf7496abe17a6ff56fc540cd4d2f67431

    • SHA512

      0e6657613caa3ea9dc6bce89c015a2d98b7bc64c60f0fd93c8de9a55894d0357c543de68183d014d20f46c9dd364f88a487cd505fadb62163889382b3df1cf1e

    • SSDEEP

      3072:UwKjJ2vr1SVt5hGG/hoH0QkITZgL0ZuBRYWaznON1jYnr:UZJ2vr1SVt5hG+42IC6IRYBzq1I

    Score
    9/10
    credential_accessdiscovery

    • Contacts a large (31522) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Renames itself

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Enumerates running processes

      Discovers information about currently running processes on the system

    • Reads process memory

      Read the memory of a process through the /proc virtual filesystem. This can be used to steal credentials.

      credential_access
    behavioral1

MITRE ATT&CK Enterprise v15

Tasks

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.