Overview

overview

1

Static

static

.rsync/c/go

linux_amd64

.rsync/c/go

linux_mipsel

.rsync/c/go

linux_mips

.rsync/c/l...c.so.6

linux_amd64

.rsync/c/l...c.so.6

linux_mipsel

.rsync/c/l...c.so.6

linux_mips

.rsync/c/l...l.so.2

linux_amd64

.rsync/c/l...l.so.2

linux_mipsel

.rsync/c/l...l.so.2

linux_mips

.rsync/c/l...s.so.2

linux_amd64

.rsync/c/l...s.so.2

linux_mipsel

.rsync/c/l...s.so.2

linux_mips

.rsync/c/l...s.so.2

linux_amd64

.rsync/c/l...s.so.2

linux_mipsel

.rsync/c/l...s.so.2

linux_mips

.rsync/c/l...d.so.0

linux_amd64

.rsync/c/l...d.so.0

linux_mipsel

.rsync/c/l...d.so.0

linux_mips

.rsync/c/l....23.so

linux_amd64

.rsync/c/l....23.so

linux_mipsel

.rsync/c/l....23.so

linux_mips

.rsync/c/l...v.so.2

linux_amd64

.rsync/c/l...v.so.2

linux_mipsel

.rsync/c/l...v.so.2

linux_mips

.rsync/c/lib/32/tsm

linux_amd64

.rsync/c/lib/32/tsm

linux_mipsel

.rsync/c/lib/32/tsm

linux_mips

.rsync/c/l...c.so.6

linux_amd64

.rsync/c/l...l.so.2

linux_amd64

.rsync/c/l...s.so.2

linux_amd64

.rsync/c/l...s.so.2

linux_amd64

.rsync/c/l...d.so.0

linux_amd64

Analysis

  • max time kernel
    0s
  • max time network
    10s
  • platform
    linux_mipsel
  • resource
    debian9-mipsel
  • submitted
    15-09-2021 06:03

Sharing

Copy URL
Twitter E-mail

Errors

Reason
Remote task has failed: platform exec: exit status 1: 2021/09/15 08:19:09 insmod stahp.ko pid=322 receiver=10.4.0.1:41399 2021/09/15 08:19:11 Failed to copy payload to .rsync/c/lib/32/libc.so.6 -> open .rsync/c/lib/32/libc.so.6: no such file or directory 2021/09/15 08:19:11 Payload error: fork/exec /tmp/861012984/payload.dat: no such file or directory
Report Analysis Logs

General

  • Target

    .rsync/c/lib/32/libc.so.6

  • Size

    1.7MB

  • MD5

    5efa4121a76c377005e2f75c65ead6c4

  • SHA1

    d113ad309edaa3902fb7a5ddb84236a4db651667

  • SHA256

    fab65ef05cd63c452a554a0c0808d3773be9fcc7e9a82ca36ae21c8f2db45454

  • SHA512

    6d639eceb6b50fdaa6da8e89a4de3febbe6011b862c03426703d94e4bc419af56ad457a8b1a8bc997157031b5db76e84b0f9e7d012e83c5430fdd29eec951b1b

Score
1/10

Malware Config

Signatures

Processes

  • /tmp/861012984/payload.dat
    /tmp/861012984/payload.dat
    1⤵
      PID:344

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads