9fbb13dd5d85279135adaa9ae3f4056333849a1bf3ece0469fd1424ddbb49d5f | Triage

Analysis

max time kernel
0s
max time network
153s
platform
linux_mips
resource
debian9-mipsbe-en-20211208
resource tags

arch:mipsimage:debian9-mipsbe-en-20211208kernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipssystem
submitted
05-08-2022 16:34

Sharing

Report Analysis Logs

General

Target

JetBrains 2022 ???????/reset_script/reset_jetbrains_eval_mac_linux.sh
Size

558B
MD5

d4a64ce441aaef7f110a3f74296113aa
SHA1

a9b938e9f7a568b0439b4e0f4462d48da3c1f850
SHA256

1a34b0606276623da4fcc89f094068d74475e7c2e5d92b16cdbc714df3a0eb6e
SHA512

4c2038a360cb1cb71837d8dabc72c255f9d4082e840264263479b988524bde1c19550a5f703bf8877b029234b661a92c43268a71acf833fb0800498d3fc17977

Score

5^/10

Malware Config

Signatures

Writes file to tmp directory 1 IoCs

Malware often drops required files in the /tmp directory.

Processes:

reset_jetbrains_eval_mac_linux.sh

description	ioc	process
/tmp/JetBrains 2022 ???????/reset_script/reset_jetbrains_eval_mac_linux.sh	/tmp/JetBrains 2022 ???????/reset_script/reset_jetbrains_eval_mac_linux.sh	reset_jetbrains_eval_mac_linux.sh

/tmp/JetBrains 2022 ???????/reset_script/reset_jetbrains_eval_mac_linux.sh
"/tmp/JetBrains 2022 ???????/reset_script/reset_jetbrains_eval_mac_linux.sh"
1⤵
- Writes file to tmp directory
PID:320

/bin/uname
uname -s
2⤵
PID:321

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...