Overview

overview

8

Static

static

8

ExeFilter-...eur.py

linux_amd64

ExeFilter-...eur.py

linux_armhf

ExeFilter-...eur.py

linux_mips

ExeFilter-...eur.py

linux_mipsel

ExeFilter-...ier.py

linux_amd64

ExeFilter-...ier.py

linux_armhf

ExeFilter-...ier.py

linux_mips

ExeFilter-...ier.py

linux_mipsel

ExeFilter-...ire.py

linux_amd64

ExeFilter-...ire.py

linux_armhf

ExeFilter-...ire.py

linux_mips

ExeFilter-...ire.py

linux_mipsel

ExeFilter-...Zip.py

linux_amd64

ExeFilter-...Zip.py

linux_armhf

ExeFilter-...Zip.py

linux_mips

ExeFilter-...Zip.py

linux_mipsel

ExeFilter-...MO.bat

windows7_x64

3

ExeFilter-...MO.bat

windows10-2004_x64

3

ExeFilter-...ter.py

linux_amd64

ExeFilter-...ter.py

linux_armhf

ExeFilter-...ter.py

linux_mips

ExeFilter-...ter.py

linux_mipsel

ExeFilter-...EN.pdf

windows7_x64

1

ExeFilter-...EN.pdf

windows10-2004_x64

1

ExeFilter-...FR.pdf

windows7_x64

1

ExeFilter-...FR.pdf

windows10-2004_x64

1

ExeFilter-...ier.py

linux_amd64

ExeFilter-...ier.py

linux_armhf

ExeFilter-...ier.py

linux_mips

ExeFilter-...ier.py

linux_mipsel

ExeFilter-...tre.py

linux_amd64

ExeFilter-...tre.py

linux_armhf

Analysis

  • max time kernel
    0s
  • platform
    linux_amd64
  • resource
    ubuntu1804-amd64-en-20211208
  • submitted
    14-04-2022 13:58

Sharing

Copy URL
Twitter E-mail

Errors

Reason
platform exec: exit status 1: 2021/12/08 17:43:48 insmod stahp.ko pid=574 receiver=10.127.0.1:43463 eternalize_pid=574 2021/12/08 17:43:52 Failed to copy payload to ExeFilter-1.1.2-alpha3/Conteneur_Zip.py -> open ExeFilter-1.1.2-alpha3/Conteneur_Zip.py: no such file or directory 2021/12/08 17:43:53 Payload error: fork/exec /tmp/476552380/payload.dat: no such file or directory
Report Analysis Logs

General

  • Target

    ExeFilter-1.1.2-alpha3/Conteneur_Zip.py

  • Size

    15KB

  • MD5

    7f081155e6095b30f168222be734eaab

  • SHA1

    ccc67cf03b5f632a0cae1e35d5fdd33c3eb71822

  • SHA256

    cf1c9ece18b6a5afc5b373194922adfbb9951aaa4998044ee237baab2a668344

  • SHA512

    8a52e73881524f6b8f62d9501201fbba7a8919911fd8b0a8673ee01a641157fefb3c91c4229009bdde6ccc750481e54022b7ac14803a89df4703b8f9793a6712

Score
1/10

Malware Config

Signatures

Processes

  • /tmp/476552380/payload.dat
    /tmp/476552380/payload.dat
    1⤵
      PID:581

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads