Overview

overview

1

Static

static

.rsync/c/go

linux_amd64

.rsync/c/go

linux_mipsel

.rsync/c/go

linux_mips

.rsync/c/l...c.so.6

linux_amd64

.rsync/c/l...c.so.6

linux_mipsel

.rsync/c/l...c.so.6

linux_mips

.rsync/c/l...l.so.2

linux_amd64

.rsync/c/l...l.so.2

linux_mipsel

.rsync/c/l...l.so.2

linux_mips

.rsync/c/l...s.so.2

linux_amd64

.rsync/c/l...s.so.2

linux_mipsel

.rsync/c/l...s.so.2

linux_mips

.rsync/c/l...s.so.2

linux_amd64

.rsync/c/l...s.so.2

linux_mipsel

.rsync/c/l...s.so.2

linux_mips

.rsync/c/l...d.so.0

linux_amd64

.rsync/c/l...d.so.0

linux_mipsel

.rsync/c/l...d.so.0

linux_mips

.rsync/c/l....23.so

linux_amd64

.rsync/c/l....23.so

linux_mipsel

.rsync/c/l....23.so

linux_mips

.rsync/c/l...v.so.2

linux_amd64

.rsync/c/l...v.so.2

linux_mipsel

.rsync/c/l...v.so.2

linux_mips

.rsync/c/lib/32/tsm

linux_amd64

.rsync/c/lib/32/tsm

linux_mipsel

.rsync/c/lib/32/tsm

linux_mips

.rsync/c/l...c.so.6

linux_amd64

.rsync/c/l...l.so.2

linux_amd64

.rsync/c/l...s.so.2

linux_amd64

.rsync/c/l...s.so.2

linux_amd64

.rsync/c/l...d.so.0

linux_amd64

Analysis

  • max time kernel
    0s
  • max time network
    25s
  • platform
    linux_mips
  • resource
    debian9-mipsbe
  • submitted
    15-09-2021 06:03

Sharing

Copy URL
Twitter E-mail

Errors

Reason
Remote task has failed: platform exec: exit status 1: 2020/11/19 16:43:03 insmod stahp.ko pid=324 receiver=10.4.0.1:41399 2020/11/19 16:43:04 Failed to copy payload to .rsync/c/lib/32/libpthread.so.0 -> open .rsync/c/lib/32/libpthread.so.0: no such file or directory 2020/11/19 16:43:04 Payload error: fork/exec /tmp/995786257/payload.dat: no such file or directory
Report Analysis Logs

General

  • Target

    .rsync/c/lib/32/libpthread.so.0

  • Size

    131KB

  • MD5

    75e1a716e551baf6642bb528dc54827c

  • SHA1

    45bb73434f758614b05674448a1b75d4ea94e14a

  • SHA256

    36eb6ba6e40581345d15c98f6dce9a4be32318edac04ede7196e4b89aba80cdc

  • SHA512

    bc73c1d645f5f310741353f7af901b94114bb9e436a8895f471f4129a9a81bd341a7436b990a600dd6a2f4e8097b5043d13079f060e3c568a7cfabe522e13e1c

Score
1/10

Malware Config

Signatures

Processes

  • /tmp/995786257/payload.dat
    /tmp/995786257/payload.dat
    1⤵
      PID:330

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads