895b60412525d06c503e11ff0e7e86955fd829f00daf3c01026be4e0aa00e29b

Analysis

max time kernel
144s
max time network
154s
platform
debian-12_mipsel
resource
debian12-mipsel-20260513-en
resource tags

arch:mipselimage:debian12-mipsel-20260513-enkernel:6.1.0-17-4kc-maltalocale:en-usos:debian-12-mipselsystem
submitted
22/09/2026, 11:28

Target
jaffacakes118_895b60412525d06c503e11ff0e7e86955fd829f00daf3c01026be4e0aa00e29b.bin
Size 77KB
Sample260922-nlabbadb59
SHA256 895b60412525d06c503e11ff0e7e86955fd829f00daf3c01026be4e0aa00e29b
MD5 b1592290fab4b2ea0798fab81629c877
SHA1 95d90a7b00623ea27ee782426e6cd96165befaa3
SHA512 3e0997d7e4c613e9ba0260c8755d1b386ed030816d1fe92ecab5c682ec1fe0692ea3456ca75eec488ff33bd6d5a6722c243394566e331256711905a235039a26
SSDEEP 1536:KoN6WJ2A7hR68pIp+gwZZEzQ0p+tMvC/D:KoD2W6yIpLwZNt/D
TLSH
T13D73C70AAF609EF7E85FDD3305E9870134CDA85762A83B3A3274C62CFA5A54745E3C94
MD5 SHA1 SHA512 SSDEEP TLSH

Score

9^/10

discovery

Contacts a large (53182) amount of remote hosts 1 TTPs
This may indicate a network scan to discover remotely running services.
discovery

Network Service Discovery
T1046
Creates a large amount of network flows 1 TTPs
This may indicate a network scan to discover remotely running services.
discovery

Network Service Discovery
T1046

Deletes itself 1 IoCs

pid	Process
803	jaffacakes118_895b60412525d06c503e11ff0e7e86955fd829f00daf3c01026be4e0aa00e29b.bin

Changes its process name 1 IoCs

description	ioc	pid	Process
Changes the process name, possibly in an attempt to hide itself	/bin/sh	803	jaffacakes118_895b60412525d06c503e11ff0e7e86955fd829f00daf3c01026be4e0aa00e29b.bin

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Network Service Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact