Overview

overview

1

Static

static

.rsync/c/go

linux_amd64

.rsync/c/go

linux_mipsel

.rsync/c/go

linux_mips

.rsync/c/l...c.so.6

linux_amd64

.rsync/c/l...l.so.2

linux_amd64

.rsync/c/l...s.so.2

linux_amd64

.rsync/c/l...s.so.2

linux_amd64

.rsync/c/l...d.so.0

linux_amd64

.rsync/c/l....23.so

linux_amd64

.rsync/c/l...v.so.2

linux_amd64

.rsync/c/lib/32/tsm

linux_amd64

.rsync/c/l...c.so.6

linux_amd64

.rsync/c/l...l.so.2

linux_amd64

.rsync/c/l...s.so.2

linux_amd64

.rsync/c/l...s.so.2

linux_amd64

.rsync/c/l...d.so.0

linux_amd64

.rsync/c/l....23.so

linux_amd64

.rsync/c/l...v.so.2

linux_amd64

.rsync/c/lib/64/tsm

linux_amd64

.rsync/c/run

linux_amd64

.rsync/c/run

linux_mipsel

.rsync/c/run

linux_mips

.rsync/c/slow

linux_amd64

.rsync/c/slow

linux_mipsel

.rsync/c/slow

linux_mips

.rsync/c/tsm

linux_amd64

.rsync/c/tsm

linux_mipsel

.rsync/c/tsm

linux_mips

.rsync/c/tsm32

linux_amd64

.rsync/c/watchdog

linux_amd64

.rsync/c/watchdog

linux_mipsel

.rsync/c/watchdog

linux_mips

Analysis

  • max time kernel
    0s
  • max time network
    0s
  • platform
    linux_amd64
  • resource
    ubuntu-amd64
  • submitted
    15-09-2021 06:03

Sharing

Copy URL
Twitter E-mail

Errors

Reason
Remote task has failed: platform exec: exit status 1: 2021/08/12 14:12:33 insmod stahp.ko pid=625 receiver=10.4.0.1:41399 2021/08/12 14:12:37 Failed to copy payload to .rsync/c/tsm32 -> open .rsync/c/tsm32: no such file or directory 2021/08/12 14:12:37 Payload error: fork/exec /tmp/512900647/payload.dat: no such file or directory
Report Analysis Logs

General

  • Target

    .rsync/c/tsm32

  • Size

    1.8MB

  • MD5

    2b3d76b61b2308af2bbe8f4800ff3d0f

  • SHA1

    c6ab8cb882052fe02b80bff6eb5be6d08a78d6fe

  • SHA256

    090ee7cae782c0f4ec0c20ff97009d03099381627776019d0f1f014884ea6375

  • SHA512

    d541d8ae7e4d2c157a03440c55189331825b13cd583bbc21b6a129b856d312bbd2c41c1e2f4a2ca87858077d22f598dbed678f34ea34b936bd5605234d57b845

Score
1/10

Malware Config

Signatures

Processes

  • /tmp/512900647/payload.dat
    /tmp/512900647/payload.dat
    1⤵
      PID:673

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads