DigitalSide Threat Intel

arm

First submission 2022-04-04 09:31:01

File details

File type: ELF 32-bit LSB executable, ARM, version 1 (ARM), statically linked, stripped
File type: 55.47 KB (56800 bytes)
MD5: 5a4ee01f3d14c380a3f92da73787458d
SHA1: 4c72576700a5c22e1c15c928fbf04acf597c83cf
SHA256: fb809a0a37874e2151c24971c39a0c27cd5249b477f0786acd6e8b78d59a070a
Virus Total: 41/58 VT report date: 2022-06-24 09:49:38

File features detected

Is DLL

Packers

Anti Debug

Anti VM

Signed

XOR

URLs, FQDN and IP indicators 6

URL Host (FQDN/IP) Date Added
hXXp://194.31.98.169/uwu/arm VirusTotal Report 194.31.98.169 VirusTotal Report 2022-04-04 09:31:01
hXXp://2.56.59.232/uwu/arm VirusTotal Report 2.56.59.232 VirusTotal Report 2022-05-12 00:00:08
hXXp://85.202.169.170/uwu/arm VirusTotal Report 85.202.169.170 VirusTotal Report 2022-05-17 20:58:05
hXXp://194.31.98.104/uwu/arm VirusTotal Report 194.31.98.104 VirusTotal Report 2022-06-08 23:47:05
hXXp://194.31.98.104/uwu//arm VirusTotal Report 194.31.98.104 VirusTotal Report 2022-06-24 12:25:05
hXXp://107.182.129.226/uwu/arm VirusTotal Report 107.182.129.226 VirusTotal Report 2022-08-01 11:49:05

Strings analysis - Possible IPs found 2

156.96.151.226
23.254.230.120