Overview

overview

10

Static

static

10

78769e4085...7e.zip

windows7_x64

1

78769e4085...7e.zip

windows10-2004_x64

malware-an...er.pdf

windows7_x64

1

malware-an...er.pdf

windows10-2004_x64

1

malware-an...is.pdf

windows7_x64

1

malware-an...is.pdf

windows10-2004_x64

1

malware-an...ypt.py

linux_amd64

malware-an...ypt.py

linux_armhf

malware-an...ypt.py

linux_mips

malware-an...ypt.py

linux_mipsel

malware-an...ons.py

windows7_x64

3

malware-an...ons.py

windows10-2004_x64

3

malware-an...is.pdf

windows7_x64

1

malware-an...is.pdf

windows10-2004_x64

malware-an...tt.ps1

windows7_x64

10

malware-an...tt.ps1

windows10-2004_x64

8

malware-an...tt.vbs

windows7_x64

malware-an...tt.vbs

windows10-2004_x64

7

malware-an...er.ps1

windows7_x64

1

malware-an...er.ps1

windows10-2004_x64

malware-an...od.ps1

windows7_x64

malware-an...od.ps1

windows10-2004_x64

10

malware-an...44.exe

windows7_x64

10

malware-an...44.exe

windows10-2004_x64

malware-an...55.dll

windows7_x64

1

malware-an...55.dll

windows10-2004_x64

malware-an...xes.py

linux_amd64

malware-an...xes.py

linux_armhf

malware-an...xes.py

linux_mips

malware-an...xes.py

linux_mipsel

malware-an...dra.py

windows7_x64

malware-an...dra.py

windows10-2004_x64

3

Analysis

  • platform
    linux_mips
  • resource
    debian9-mipsbe-en-20211208
  • submitted
    21-05-2022 11:11

Sharing

Copy URL
Twitter E-mail

Errors

Reason
platform exec: Failed to copy payload to malware-analysis-writeups-master/ava-maria-rat/helperScripts/buerBeaconDecrypt.py -> open malware-analysis-writeups-master/ava-maria-rat/helperScripts/buerBeaconDecrypt.py: no such file or directory payload error: fork/exec /tmp/357987652/payload.dat: no such file or directory
Report Analysis Logs

General

  • Target

    malware-analysis-writeups-master/ava-maria-rat/helperScripts/buerBeaconDecrypt.py

  • Size

    1KB

  • MD5

    126b64b45ab5de39b175dd69b842ac93

  • SHA1

    17827879fe3a573f05c7f8ecb4a2c56a4428d614

  • SHA256

    7ecb3801539dd8dc9052f6347ed5d81f85ff9594640343112d164509ebc6f727

  • SHA512

    d946bf6010503ec152ea4f0e016ba327239eba253418f83f0869dfc492f8bfc421dca7c42eae478f38143305b42d1b62492ad5ba71a4b63f4f8c77d420d9b7a3

Score
1/10

Malware Config

Signatures

Processes

  • /tmp/357987652/payload.dat
    /tmp/357987652/payload.dat
    1⤵
      PID:324

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads