Resubmissions

02/06/2022, 16:50

220602-vceb8sceam10

18/05/2022, 18:03

220518-wm8jhafbgm5

Analysis

  • max time kernel
    0s
  • max time network
    103s
  • platform
    linux_amd64
  • resource
    ubuntu1804-amd64-en-20211208
  • submitted
    02/06/2022, 16:50

General

  • Target
    bd353a28886815f43fe71c561a027fdeff5cd83e17e2055c0e52bea344ae51d3.bin
  • Size 27KB
  • Sample220602-vceb8sceam
  • SHA256 bd353a28886815f43fe71c561a027fdeff5cd83e17e2055c0e52bea344ae51d3
  • MD5 SHA1 SHA512
Score
5/10

Malware Config

Signatures

  • Reads runtime system information 1 IoCs

    Reads data from /proc virtual filesystem.

Processes

  • ./bd353a28886815f43fe71c561a027fdeff5cd83e17e2055c0e52bea344ae51d3.bin
    ./bd353a28886815f43fe71c561a027fdeff5cd83e17e2055c0e52bea344ae51d3.bin
    1⤵
      PID:577
      • /bin/sh
        sh -c "/bin/rm -f /var/lock/kdumpdb;/bin/cp ./bd353a28886815f43fe71c561a027fdeff5cd83e17e2055c0e52bea344ae51d3.bin /var/lock/kdumpdb && /bin/chmod 755 /var/lock/kdumpdb && /var/lock/kdumpdb --init"
        2⤵
          PID:578
          • /bin/rm
            /bin/rm -f /var/lock/kdumpdb
            3⤵
              PID:579
            • /bin/cp
              /bin/cp ./bd353a28886815f43fe71c561a027fdeff5cd83e17e2055c0e52bea344ae51d3.bin /var/lock/kdumpdb
              3⤵
              • Reads runtime system information
              PID:580
            • /bin/chmod
              /bin/chmod 755 /var/lock/kdumpdb
              3⤵
                PID:581
              • /var/lock/kdumpdb
                /var/lock/kdumpdb --init
                3⤵
                  PID:582

            Network

                  MITRE ATT&CK Matrix

                  Replay Monitor

                  Loading Replay Monitor...

                  Downloads