Overview

overview

10

Static

static

10

.rsync/a/anacron

linux_amd64

.rsync/c/go

linux_amd64

.rsync/c/go

linux_mipsel

.rsync/c/go

linux_mips

.rsync/c/golan

linux_amd64

.rsync/c/golan

linux_mipsel

.rsync/c/golan

linux_mips

.rsync/c/l...c.so.6

linux_amd64

.rsync/c/l...l.so.2

linux_amd64

.rsync/c/l...s.so.2

linux_amd64

.rsync/c/l...s.so.2

linux_amd64

.rsync/c/l...d.so.0

linux_amd64

.rsync/c/l....23.so

linux_amd64

.rsync/c/l...v.so.2

linux_amd64

.rsync/c/lib/32/tsm

linux_amd64

.rsync/c/l...c.so.6

linux_amd64

.rsync/c/l...l.so.2

linux_amd64

.rsync/c/l...s.so.2

linux_amd64

.rsync/c/l...s.so.2

linux_amd64

.rsync/c/l...d.so.0

linux_amd64

.rsync/c/l....23.so

linux_amd64

.rsync/c/l...v.so.2

linux_amd64

.rsync/c/lib/64/tsm

linux_amd64

.rsync/c/l...v7l.so

linux_amd64

.rsync/c/l...v7l.so

linux_mipsel

.rsync/c/l...v7l.so

linux_mips

.rsync/c/l...c.so.6

linux_amd64

.rsync/c/l...c.so.6

linux_mipsel

.rsync/c/l...c.so.6

linux_mips

.rsync/c/l...l.so.2

linux_amd64

.rsync/c/l...l.so.2

linux_mipsel

.rsync/c/l...l.so.2

linux_mips

Analysis

  • max time kernel
    0s
  • max time network
    30s
  • platform
    linux_mips
  • resource
    debian9-mipsbe
  • submitted
    15-09-2021 06:04

Sharing

Copy URL
Twitter E-mail

Errors

Reason
Remote task has failed: platform exec: exit status 1: 2021/09/15 08:52:03 insmod stahp.ko pid=328 receiver=10.4.0.1:41399 2021/09/15 08:52:04 Failed to copy payload to .rsync/c/lib/arm/libarmmem-v7l.so -> open .rsync/c/lib/arm/libarmmem-v7l.so: no such file or directory 2021/09/15 08:52:04 Payload error: fork/exec /tmp/276161672/payload.dat: no such file or directory
Report Analysis Logs

General

  • Target

    .rsync/c/lib/arm/libarmmem-v7l.so

  • Size

    17KB

  • MD5

    f625ac17fa92dfc2cb93948bb1e630b9

  • SHA1

    8dc1e0ada2443d236c9868f730d49914be444cf3

  • SHA256

    b3941992067e5d6c94cc59ab8d8bd97c716a94f4345827d452084c7f51ab4f17

  • SHA512

    f43a835728e48e117aa3ba23eb33247bbc30298c9250d878e06829ff9eef04fbe8d3a4bdb8fd5ae058769736b11f4e73722a6132e537a2f8f009db47f6f03e5b

Score
1/10

Malware Config

Signatures

Processes

  • /tmp/276161672/payload.dat
    /tmp/276161672/payload.dat
    1⤵
      PID:351

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads