Overview

overview

1

Static

static

.rsync/c/go

linux_amd64

.rsync/c/go

linux_mipsel

.rsync/c/go

linux_mips

.rsync/c/l...c.so.6

linux_amd64

.rsync/c/l...c.so.6

linux_mipsel

.rsync/c/l...c.so.6

linux_mips

.rsync/c/l...l.so.2

linux_amd64

.rsync/c/l...l.so.2

linux_mipsel

.rsync/c/l...l.so.2

linux_mips

.rsync/c/l...s.so.2

linux_amd64

.rsync/c/l...s.so.2

linux_mipsel

.rsync/c/l...s.so.2

linux_mips

.rsync/c/l...s.so.2

linux_amd64

.rsync/c/l...s.so.2

linux_mipsel

.rsync/c/l...s.so.2

linux_mips

.rsync/c/l...d.so.0

linux_amd64

.rsync/c/l...d.so.0

linux_mipsel

.rsync/c/l...d.so.0

linux_mips

.rsync/c/l....23.so

linux_amd64

.rsync/c/l....23.so

linux_mipsel

.rsync/c/l....23.so

linux_mips

.rsync/c/l...v.so.2

linux_amd64

.rsync/c/l...v.so.2

linux_mipsel

.rsync/c/l...v.so.2

linux_mips

.rsync/c/lib/32/tsm

linux_amd64

.rsync/c/lib/32/tsm

linux_mipsel

.rsync/c/lib/32/tsm

linux_mips

.rsync/c/l...c.so.6

linux_amd64

.rsync/c/l...l.so.2

linux_amd64

.rsync/c/l...s.so.2

linux_amd64

.rsync/c/l...s.so.2

linux_amd64

.rsync/c/l...d.so.0

linux_amd64

Analysis

  • max time kernel
    0s
  • max time network
    30s
  • platform
    linux_mips
  • resource
    debian9-mipsbe
  • submitted
    15-09-2021 06:03

Sharing

Copy URL
Twitter E-mail

Errors

Reason
Remote task has failed: platform exec: exit status 1: 2021/09/15 08:56:32 insmod stahp.ko pid=327 receiver=10.4.0.1:41399 2021/09/15 08:56:34 Failed to copy payload to .rsync/c/lib/32/libdl.so.2 -> open .rsync/c/lib/32/libdl.so.2: no such file or directory 2021/09/15 08:56:34 Payload error: fork/exec /tmp/268900809/payload.dat: no such file or directory
Report Analysis Logs

General

  • Target

    .rsync/c/lib/32/libdl.so.2

  • Size

    13KB

  • MD5

    92f19f5b4b9e548f84167b66ee9a025c

  • SHA1

    e7055579bd464efed60f75d36afb6b2fb716e4e6

  • SHA256

    625ac196ce9304e9866091adbe3049f3d6db2d0ed19006a3f059f16c91842e8d

  • SHA512

    d240c3fe3df810b0bc8b121826445f08f2245746f40db20249cb6328c5ac20ae5ddec6221459256105482316c52072b5084750d45dddbe471b80eac7ff34c849

Score
1/10

Malware Config

Signatures

Processes

  • /tmp/268900809/payload.dat
    /tmp/268900809/payload.dat
    1⤵
      PID:349

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads