General
- Target installer.run
- Size 99KB
- Sample210612-kcegep1ef2
- SHA256 819eab9afaca5601ffd83c85a7edd6cd1899e6b431ab8e901a385065912adeb1
- MD5 d4b45f4ab1ec5616026e8fbed2431be8
- SHA1 28ecd4944f37bb8f9b7dfd1d486f7c9c027166d0
- SHA512 2026b561dce762930e3c6a7179d509efb7be482281111f65461328ed6da5c04e1bb7a7bf3f5cd883920a2cdd50e5c72b1c500d6f4963174792f0c183070b0771
- MD5 SHA1 SHA512
Score
7/10
Static task
static1
Behavioral task
behavioral1
Sample
installer.run
Resource
ubuntu-amd64
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
installer.run
Resource
debian9-mipsel
0 signatures
0 seconds
Behavioral task
behavioral3
Sample
installer.run
Resource
debian9-mipsbe
0 signatures
0 seconds
Malware Config
Targets
-
- Target installer.run
- Size 99KB
- SHA256 819eab9afaca5601ffd83c85a7edd6cd1899e6b431ab8e901a385065912adeb1
- MD5 d4b45f4ab1ec5616026e8fbed2431be8
- SHA1 28ecd4944f37bb8f9b7dfd1d486f7c9c027166d0
- SHA512 2026b561dce762930e3c6a7179d509efb7be482281111f65461328ed6da5c04e1bb7a7bf3f5cd883920a2cdd50e5c72b1c500d6f4963174792f0c183070b0771
- MD5 SHA1 SHA512
Score7/10-
Write file to user bin folder
-
Reads runtime system information
Reads data from /proc virtual filesystem.
-
Writes file to tmp directory
Malware often drops required files in the /tmp directory.