c5858cfab02aa549d06dce34aa05fe96438426a67c2f86fb0dd669f824e43bb1 | Triage

Analysis

max time kernel
0s
max time network
103s
platform
linux_amd64
resource
ubuntu1804-amd64-en-20211208
resource tags

arch:amd64arch:i386image:ubuntu1804-amd64-en-20211208kernel:4.15.0-161-genericlocale:en-usos:ubuntu-18.04-amd64system
submitted
24-08-2022 22:35

Sharing

Report Analysis Logs

General

Target

.git/hooks/pre-commit.sample
Size

1KB
MD5

01b1688f97f94776baae85d77b06048b
SHA1

36aed8976dcc08b5076844f0ec645b18bc37758f
SHA256

12c723235131f1c5576c652ac2a0a007f261a93c0ddc445b1dcee6cd98e30788
SHA512

4a7ac2ed2ffe50d2a997c3477b5855c3d19423c295a82f7d660be3418217a183b0ce25f94ae2e350f4d93eda3b75a4bd62cf27f0685d8a837919bcc9e7e0962a

Score

5^/10

Malware Config

Signatures

Writes file to tmp directory 1 IoCs
Malware often drops required files in the /tmp directory.

Processes:

pre-commit.sample

description ioc process

/tmp/.git/hooks/pre-commit.sample /tmp/.git/hooks/pre-commit.sample pre-commit.sample

/tmp/.git/hooks/pre-commit.sample
/tmp/.git/hooks/pre-commit.sample
1⤵
- Writes file to tmp directory
PID:576

/usr/bin/wc
wc -c
1⤵
PID:581

/usr/bin/tr
tr -d "[ -~]\\0"
1⤵
PID:580

/usr/local/sbin/git
git diff-index --check --cached 4b825dc642cb6eb9a060e54bf8d69288fbee4904 --
1⤵
PID:576

/usr/local/bin/git
git diff-index --check --cached 4b825dc642cb6eb9a060e54bf8d69288fbee4904 --
1⤵
PID:576

/usr/sbin/git
git diff-index --check --cached 4b825dc642cb6eb9a060e54bf8d69288fbee4904 --
1⤵
PID:576

/usr/bin/git
git diff-index --check --cached 4b825dc642cb6eb9a060e54bf8d69288fbee4904 --
1⤵
PID:576

/sbin/git
git diff-index --check --cached 4b825dc642cb6eb9a060e54bf8d69288fbee4904 --
1⤵
PID:576

/bin/git
git diff-index --check --cached 4b825dc642cb6eb9a060e54bf8d69288fbee4904 --
1⤵
PID:576

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...