aff7b239948a6c83abd5733ce2e1c4c3edd37dc464cded1fc8876579281d4c36

Analysis

max time kernel
149s
max time network
151s
platform
debian-9_mips
resource
debian9-mipsbe-20260513-en
resource tags

arch:mipsimage:debian9-mipsbe-20260513-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipssystem
submitted
22/09/2026, 09:47

Target
jaffacakes118_aff7b239948a6c83abd5733ce2e1c4c3edd37dc464cded1fc8876579281d4c36.bin
Size 77KB
Sample260922-lsfessvx2n
SHA256 aff7b239948a6c83abd5733ce2e1c4c3edd37dc464cded1fc8876579281d4c36
MD5 5b6a052348dde55063bb47bdfd6bbb4d
SHA1 e3ae7d02ab0df4a6fbcc68527bde6625920ab778
SHA512 886cbe67c1d3a5a3bdcd1404d59823d447a708ca26f9bfe40f0b2b9aae4109ad21fe1e495fe9e82f1a914f34d4eb96a5c1261ab1a25e109601ebf3004626c702
SSDEEP 768:SPtLV7wCFXivQbCKNG/Uj3zgzKrVPqnDU5uygjC24vS0OppEV2oyxEdec+e1kIVh:IRLhzrzm7H46d6Bec+QkYKBS
TLSH
T1EE73641E6A21DFFEFA5C82340B738E206799239136E1D6C4E25CD7185E7024E685F7E8
MD5 SHA1 SHA512 SSDEEP TLSH

Score

9^/10

discovery

Contacts a large (56785) amount of remote hosts 1 TTPs
This may indicate a network scan to discover remotely running services.
discovery

Network Service Discovery
T1046
Creates a large amount of network flows 1 TTPs
This may indicate a network scan to discover remotely running services.
discovery

Network Service Discovery
T1046

Deletes itself 1 IoCs

pid	Process
706	jaffacakes118_aff7b239948a6c83abd5733ce2e1c4c3edd37dc464cded1fc8876579281d4c36.bin

Changes its process name 1 IoCs

description	ioc	pid	Process
Changes the process name, possibly in an attempt to hide itself	/bin/sh	706	jaffacakes118_aff7b239948a6c83abd5733ce2e1c4c3edd37dc464cded1fc8876579281d4c36.bin

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Network Service Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact