Overview

overview

1

Static

static

.rsync/c/go

linux_amd64

.rsync/c/go

linux_mipsel

.rsync/c/go

linux_mips

.rsync/c/l...c.so.6

linux_amd64

.rsync/c/l...l.so.2

linux_amd64

.rsync/c/l...s.so.2

linux_amd64

.rsync/c/l...s.so.2

linux_amd64

.rsync/c/l...d.so.0

linux_amd64

.rsync/c/l....23.so

linux_amd64

.rsync/c/l...v.so.2

linux_amd64

.rsync/c/lib/32/tsm

linux_amd64

.rsync/c/l...c.so.6

linux_amd64

.rsync/c/l...l.so.2

linux_amd64

.rsync/c/l...s.so.2

linux_amd64

.rsync/c/l...s.so.2

linux_amd64

.rsync/c/l...d.so.0

linux_amd64

.rsync/c/l....23.so

linux_amd64

.rsync/c/l...v.so.2

linux_amd64

.rsync/c/lib/64/tsm

linux_amd64

.rsync/c/run

linux_amd64

.rsync/c/run

linux_mipsel

.rsync/c/run

linux_mips

.rsync/c/slow

linux_amd64

.rsync/c/slow

linux_mipsel

.rsync/c/slow

linux_mips

.rsync/c/tsm

linux_amd64

.rsync/c/tsm

linux_mipsel

.rsync/c/tsm

linux_mips

.rsync/c/tsm32

linux_amd64

.rsync/c/watchdog

linux_amd64

.rsync/c/watchdog

linux_mipsel

.rsync/c/watchdog

linux_mips

Analysis

  • max time kernel
    0s
  • max time network
    10s
  • platform
    linux_mipsel
  • resource
    debian9-mipsel
  • submitted
    15-09-2021 06:04

Sharing

Copy URL
Twitter E-mail

Errors

Reason
Remote task has failed: platform exec: exit status 1: 2020/11/19 16:54:53 insmod stahp.ko pid=317 receiver=10.4.0.1:41399 2020/11/19 16:54:54 Failed to copy payload to .rsync/c/slow -> open .rsync/c/slow: no such file or directory 2020/11/19 16:54:54 Payload error: fork/exec /tmp/814440232/payload.dat: no such file or directory
Report Analysis Logs

General

  • Target

    .rsync/c/slow

  • Size

    47B

  • MD5

    7da994ca9c99858f02f1c73b11d71f89

  • SHA1

    a47692b3c1eb781ed2a31a1579dd351c8de80fb5

  • SHA256

    b92e77fdc4aa3181ed62b2d0e58298f51f2993321580c8d2e3368ef8d6944364

  • SHA512

    6f060e9a03356792410c19819d9b2c0bdf397adbf8d0855a9440d32c055f7844197cadcc01e67ac7d0174feeab0d22449d4a4c454540b20cf78875a673d5f6ff

Score
1/10

Malware Config

Signatures

Processes

  • /tmp/814440232/payload.dat
    /tmp/814440232/payload.dat
    1⤵
      PID:324

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads