Overview

overview

10

Static

static

10

.rsync/a/anacron

linux_amd64

.rsync/c/go

linux_amd64

.rsync/c/go

linux_mipsel

.rsync/c/go

linux_mips

.rsync/c/golan

linux_amd64

.rsync/c/golan

linux_mipsel

.rsync/c/golan

linux_mips

.rsync/c/l...c.so.6

linux_amd64

.rsync/c/l...l.so.2

linux_amd64

.rsync/c/l...s.so.2

linux_amd64

.rsync/c/l...s.so.2

linux_amd64

.rsync/c/l...d.so.0

linux_amd64

.rsync/c/l....23.so

linux_amd64

.rsync/c/l...v.so.2

linux_amd64

.rsync/c/lib/32/tsm

linux_amd64

.rsync/c/l...c.so.6

linux_amd64

.rsync/c/l...l.so.2

linux_amd64

.rsync/c/l...s.so.2

linux_amd64

.rsync/c/l...s.so.2

linux_amd64

.rsync/c/l...d.so.0

linux_amd64

.rsync/c/l....23.so

linux_amd64

.rsync/c/l...v.so.2

linux_amd64

.rsync/c/lib/64/tsm

linux_amd64

.rsync/c/l...v7l.so

linux_amd64

.rsync/c/l...v7l.so

linux_mipsel

.rsync/c/l...v7l.so

linux_mips

.rsync/c/l...c.so.6

linux_amd64

.rsync/c/l...c.so.6

linux_mipsel

.rsync/c/l...c.so.6

linux_mips

.rsync/c/l...l.so.2

linux_amd64

.rsync/c/l...l.so.2

linux_mipsel

.rsync/c/l...l.so.2

linux_mips

Analysis

  • max time kernel
    0s
  • max time network
    0s
  • platform
    linux_amd64
  • resource
    ubuntu-amd64
  • submitted
    15-09-2021 06:04

Sharing

Copy URL
Twitter E-mail

Errors

Reason
Remote task has failed: platform exec: exit status 1: 2021/08/12 14:12:33 insmod stahp.ko pid=626 receiver=10.4.0.1:41399 2021/08/12 14:12:37 Failed to copy payload to .rsync/c/lib/64/libresolv-2.23.so -> open .rsync/c/lib/64/libresolv-2.23.so: no such file or directory 2021/08/12 14:12:37 Payload error: fork/exec /tmp/334559073/payload.dat: no such file or directory
Report Analysis Logs

General

  • Target

    .rsync/c/lib/64/libresolv-2.23.so

  • Size

    98KB

  • MD5

    63ca86be8fbe85ff5efd68e737ceed99

  • SHA1

    5102e537653dc007b6f9b4863c8ef400f56dacc8

  • SHA256

    ebf85f7d506f3dd4efd7a7b1e29ff2df290f34dedefa67e5eac8350b6f41da97

  • SHA512

    3b07850adcf4aeece5f8657bf44ae8d44b2a1eb5ae462f096cd5f5f754d12f0f9b6c0e410706e792eac99007c4989bd4b7ac0955b221514e5a13d2de94827a26

Score
1/10

Malware Config

Signatures

Processes

  • /tmp/334559073/payload.dat
    /tmp/334559073/payload.dat
    1⤵
      PID:674

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads