General
- Target linus
- Size 1.2MB
- Sample210211-pzqcf8ppda
- SHA256 59ca60b197c4d2db7a9571793da63440bc048fa7c5eb995fd0f092c09cfd751d
- MD5 ad034034206082669ba7eee0ba3e0890
- SHA1 3d81b78a3ef803f89443db70eca050c08ef3f3f9
- SHA512 e1dc8047e32bb2be8afd535c3a7b4c30ea3d8bb3b557beb300ca3944946eac879c03b8abbe8ffc047dc5523542b0d554fe44efd324635c05bf40af5eb27f425f
- MD5 SHA1 SHA512
Static task
static1
Behavioral task
behavioral1
Sample
linus
Resource
ubuntu-amd64
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
linus
Resource
debian9-mipsel
0 signatures
0 seconds
Behavioral task
behavioral3
Sample
linus
Resource
debian9-mipsbe
0 signatures
0 seconds
Malware Config
Targets
-
- Target linus
- Size 1.2MB
- SHA256 59ca60b197c4d2db7a9571793da63440bc048fa7c5eb995fd0f092c09cfd751d
- MD5 ad034034206082669ba7eee0ba3e0890
- SHA1 3d81b78a3ef803f89443db70eca050c08ef3f3f9
- SHA512 e1dc8047e32bb2be8afd535c3a7b4c30ea3d8bb3b557beb300ca3944946eac879c03b8abbe8ffc047dc5523542b0d554fe44efd324635c05bf40af5eb27f425f
- MD5 SHA1 SHA512
Score9/10-
Writes file to system bin folder
-
Write file to user bin folder
-
Reads runtime system information
Reads data from /proc virtual filesystem.
-
Writes file to tmp directory
Malware often drops required files in the /tmp directory.