arm.nn?ddos

First submission 2024-10-11 02:24:02 Last sumbission 2024-10-14 18:27:02

File details

File type: ELF 32-bit LSB executable, ARM, version 1 (ARM), statically linked, stripped
Mime type: application/x-executable
File size: 106.11 KB (108660 bytes)
MD5: fa572b646bbb73d97a1bb5e4ac38883f
SHA1: ed43abbd7a464ffedfe22099c2c33af3cbcbd70d
SHA256: f52cf4400acc178aa397fee66c52ac0bc61b1435968c2b76bd79229bac28409d

File features detected

Is DLL
Packers
Anti Debug
Anti VM
Signed
XOR

OSINT Enrichments

Virus Total: 41/77 VT report date: 2024-10-09 16:44:55
Malware Type 1 trojan
Threat Type 3 mirai gafgyt bashlite

URLs, FQDN and IP indicators 1

URL Host (FQDN/IP) Date Added
hXXp://154.216.19.140/arm.nn?ddos VirusTotal Report 154.216.19.140 VirusTotal Report 2024-10-14 18:27:05

Strings analysis - Possible IPs found 3

154.216.19.140
255.255.255.255
127.0.0.1

Strings analysis - Possible URLs found 3

http://154.216.19.140/
http://154.216.19.140/lol.sh
http://154.216.19.140/curl.sh