900385f3ca0d2d342728ab11866bae1720fe87742a41c9a29b884bb297bb7b14

Analysis

max time kernel
0s
max time network
7s
platform
linux_amd64
resource
ubuntu1804-amd64-en-20211208
resource tags

arch:amd64arch:i386image:ubuntu1804-amd64-en-20211208kernel:4.15.0-161-genericlocale:en-usos:ubuntu-18.04-amd64system
submitted
19-08-2022 04:54

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

skid.x86_64-20220819-0453
Size

69KB
MD5

f68dbe02354bdb9f0e0d13ffed02bcbd
SHA1

fa5d84ccb45862ccd0d1eb7d0730b68dc77e42ff
SHA256

900385f3ca0d2d342728ab11866bae1720fe87742a41c9a29b884bb297bb7b14
SHA512

504d6d57f1765c3e0d4a8cb991217d1ac68c7118b7b5ac6aa9678ec6abefe47f671269736f542c30330dc0b7b380c4b294d029a1de3e86ff37249ac7393f6103

Score

5^/10

Malware Config

Signatures

Reads runtime system information 64 IoCs

Reads data from /proc virtual filesystem.

Processes:

description	ioc
/proc/2255/maps	/proc/2255/maps
/proc/4224/maps	/proc/4224/maps
/proc/4971/maps	/proc/4971/maps
/proc/170/maps	/proc/170/maps
/proc/1988/maps	/proc/1988/maps
/proc/5533/maps	/proc/5533/maps
/proc/3470/maps	/proc/3470/maps
/proc/5824/maps	/proc/5824/maps
/proc/6007/maps	/proc/6007/maps
/proc/5450/maps	/proc/5450/maps
/proc/15/maps	/proc/15/maps
/proc/2625/maps	/proc/2625/maps
/proc/4311/maps	/proc/4311/maps
/proc/4525/maps	/proc/4525/maps
/proc/3861/maps	/proc/3861/maps
/proc/285/maps	/proc/285/maps
/proc/1298/maps	/proc/1298/maps
/proc/1731/maps	/proc/1731/maps
/proc/2686/maps	/proc/2686/maps
/proc/2685/maps	/proc/2685/maps
/proc/3292/maps	/proc/3292/maps
/proc/4984/maps	/proc/4984/maps
/proc/5920/maps	/proc/5920/maps
/proc/4/maps	/proc/4/maps
/proc/587/maps	/proc/587/maps
/proc/816/maps	/proc/816/maps
/proc/2076/maps	/proc/2076/maps
/proc/6250/maps	/proc/6250/maps
/proc/5972/maps	/proc/5972/maps
/proc/6516/maps	/proc/6516/maps
/proc/26/maps	/proc/26/maps
/proc/913/maps	/proc/913/maps
/proc/3973/maps	/proc/3973/maps
/proc/5119/maps	/proc/5119/maps
/proc/6514/maps	/proc/6514/maps
/proc/6852/maps	/proc/6852/maps
/proc/162/maps	/proc/162/maps
/proc/352/maps	/proc/352/maps
/proc/5820/maps	/proc/5820/maps
/proc/6338/maps	/proc/6338/maps
/proc/2741/maps	/proc/2741/maps
/proc/4140/maps	/proc/4140/maps
/proc/6578/maps	/proc/6578/maps
/proc/773/maps	/proc/773/maps
/proc/1251/maps	/proc/1251/maps
/proc/1474/maps	/proc/1474/maps
/proc/2305/maps	/proc/2305/maps
/proc/774/maps	/proc/774/maps
/proc/3976/maps	/proc/3976/maps
/proc/5025/maps	/proc/5025/maps
/proc/6400/maps	/proc/6400/maps
/proc/3036/maps	/proc/3036/maps
/proc/6330/maps	/proc/6330/maps
/proc/1957/maps	/proc/1957/maps
/proc/2252/maps	/proc/2252/maps
/proc/2730/maps	/proc/2730/maps
/proc/2991/maps	/proc/2991/maps
/proc/3263/maps	/proc/3263/maps
/proc/3380/maps	/proc/3380/maps
/proc/5610/maps	/proc/5610/maps
/proc/78/maps	/proc/78/maps
/proc/3727/maps	/proc/3727/maps
/proc/5780/maps	/proc/5780/maps
/proc/6798/maps	/proc/6798/maps

/tmp/skid.x86_64-20220819-0453
/tmp/skid.x86_64-20220819-0453
1⤵
PID:581

/bin/sh
sh -c "rm -rf bin/busybox && mkdir bin; >bin/busybox && mv /tmp/skid.x86_64-20220819-0453 bin/busybox; chmod 777 bin/busybox"
1⤵
PID:583

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads