General
- Target http://103.1.186.111
- Sample260813-qaah2sbb42
Score
7/10
Malware Config
Targets
-
- Target http://103.1.186.111
Score7/10-
Outbound SSH connection to public host
SSH is used for remote access. This may indicate SSH host discovery, encrypted C2 traffic, or data exfiltration.
-
Checks hardware identifiers (DMI)
Checks DMI information which indicate if the system is a virtual machine.
-
Reads hardware information
Accesses system info like serial numbers, manufacturer names etc.