Overview

overview

8

Static

static

8

ExeFilter-...eur.py

linux_amd64

ExeFilter-...eur.py

linux_armhf

ExeFilter-...eur.py

linux_mips

ExeFilter-...eur.py

linux_mipsel

ExeFilter-...ier.py

linux_amd64

ExeFilter-...ier.py

linux_armhf

ExeFilter-...ier.py

linux_mips

ExeFilter-...ier.py

linux_mipsel

ExeFilter-...ire.py

linux_amd64

ExeFilter-...ire.py

linux_armhf

ExeFilter-...ire.py

linux_mips

ExeFilter-...ire.py

linux_mipsel

ExeFilter-...Zip.py

linux_amd64

ExeFilter-...Zip.py

linux_armhf

ExeFilter-...Zip.py

linux_mips

ExeFilter-...Zip.py

linux_mipsel

ExeFilter-...MO.bat

windows7_x64

3

ExeFilter-...MO.bat

windows10-2004_x64

3

ExeFilter-...ter.py

linux_amd64

ExeFilter-...ter.py

linux_armhf

ExeFilter-...ter.py

linux_mips

ExeFilter-...ter.py

linux_mipsel

ExeFilter-...EN.pdf

windows7_x64

1

ExeFilter-...EN.pdf

windows10-2004_x64

1

ExeFilter-...FR.pdf

windows7_x64

1

ExeFilter-...FR.pdf

windows10-2004_x64

1

ExeFilter-...ier.py

linux_amd64

ExeFilter-...ier.py

linux_armhf

ExeFilter-...ier.py

linux_mips

ExeFilter-...ier.py

linux_mipsel

ExeFilter-...tre.py

linux_amd64

ExeFilter-...tre.py

linux_armhf

Analysis

  • max time kernel
    0s
  • platform
    linux_mips
  • resource
    debian9-mipsbe-en-20211208
  • submitted
    14-04-2022 13:58

Sharing

Copy URL
Twitter E-mail

Errors

Reason
platform exec: exit status 1: 2021/12/08 18:08:07 insmod stahp.ko pid=318 receiver=10.127.0.1:43463 eternalize_pid=318 2021/12/08 18:08:08 Failed to copy payload to ExeFilter-1.1.2-alpha3/ExeFilter.py -> open ExeFilter-1.1.2-alpha3/ExeFilter.py: no such file or directory 2021/12/08 18:08:09 Payload error: fork/exec /tmp/398909095/payload.dat: no such file or directory
Report Analysis Logs

General

  • Target

    ExeFilter-1.1.2-alpha3/ExeFilter.py

  • Size

    31KB

  • MD5

    80216257be397b9e850326dd511baf71

  • SHA1

    f44d3c790e37b743315fc16e47f3b78ed6499bb2

  • SHA256

    a4252bb572224f7fa71bfbfdc1f8afaffa95fde9900d95e1253b4223fa9e6c0b

  • SHA512

    e12ff912f6208311d871299fe6cfc6a342a3564f36f9703f30796f6f62c4383e1f99f1faeb16dad22ebb016e77e1d7e6af62dc70c74f234f3f5cb8f546c42a0a

Score
1/10

Malware Config

Signatures

Processes

  • /tmp/398909095/payload.dat
    /tmp/398909095/payload.dat
    1⤵
      PID:324

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads