c5858cfab02aa549d06dce34aa05fe96438426a67c2f86fb0dd669f824e43bb1 | Triage

Analysis

max time network
123s
platform
linux_mips
resource
debian9-mipsbe-en-20211208
resource tags

arch:mipsimage:debian9-mipsbe-en-20211208kernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipssystem
submitted
24-08-2022 22:35

Sharing

Report Analysis Logs

General

Target

.git/hooks/post-update.sample
Size

189B
MD5

2b7ea5cee3c49ff53d41e00785eb974c
SHA1

b614c2f63da7dca9f1db2e7ade61ef30448fc96c
SHA256

81765af2daef323061dcbc5e61fc16481cb74b3bac9ad8a174b186523586f6c5
SHA512

473ad124642571656276bf83b9ff63ab1804d3c23a5bdae52391c6f70a894849ac60c10c9d31deff3938922ce83b68b1e60c11592bbf7ea503f4acd39968cefa

Score

5^/10

Malware Config

Signatures

Writes file to tmp directory 1 IoCs
Malware often drops required files in the /tmp directory.

Processes:

post-update.sample

description ioc process

/tmp/.git/hooks/post-update.sample /tmp/.git/hooks/post-update.sample post-update.sample

/tmp/.git/hooks/post-update.sample
/tmp/.git/hooks/post-update.sample
1⤵
- Writes file to tmp directory
PID:324

/usr/local/sbin/git
git update-server-info
1⤵
PID:324

/usr/local/bin/git
git update-server-info
1⤵
PID:324

/usr/sbin/git
git update-server-info
1⤵
PID:324

/usr/bin/git
git update-server-info
1⤵
PID:324

/sbin/git
git update-server-info
1⤵
PID:324

/bin/git
git update-server-info
1⤵
PID:324

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...