Overview
overview
5Static
static
.git/hooks...sample
ubuntu-18.04-amd64
5.git/hooks...sample
debian-9-armhf
1.git/hooks...sample
debian-9-mips
1.git/hooks...sample
debian-9-mipsel
1.git/hooks...sample
ubuntu-18.04-amd64
5.git/hooks...sample
debian-9-armhf
1.git/hooks...sample
debian-9-mips
5.git/hooks...sample
debian-9-mipsel
5.git/hooks...sample
ubuntu-18.04-amd64
5.git/hooks...sample
debian-9-armhf
5.git/hooks...sample
debian-9-mips
5.git/hooks...sample
debian-9-mipsel
1.git/hooks...sample
ubuntu-18.04-amd64
5.git/hooks...sample
debian-9-armhf
1.git/hooks...sample
debian-9-mips
5.git/hooks...sample
debian-9-mipsel
1.git/hooks...sample
ubuntu-18.04-amd64
5.git/hooks...sample
debian-9-armhf
5.git/hooks...sample
debian-9-mips
1.git/hooks...sample
debian-9-mipsel
1.git/hooks...sample
ubuntu-18.04-amd64
5.git/hooks...sample
debian-9-armhf
1.git/hooks...sample
debian-9-mips
5.git/hooks...sample
debian-9-mipsel
5.git/hooks...sample
ubuntu-18.04-amd64
5.git/hooks...sample
debian-9-armhf
1.git/hooks...sample
debian-9-mips
1.git/hooks...sample
debian-9-mipsel
1.git/hooks...sample
ubuntu-18.04-amd64
5.git/hooks...sample
debian-9-armhf
1.git/hooks...sample
debian-9-mips
5.git/hooks...sample
debian-9-mipsel
5Analysis
-
max time kernel
0s -
max time network
133s -
platform
linux_mipsel -
resource
debian9-mipsel-en-20211208 -
resource tags
arch:mipselimage:debian9-mipsel-en-20211208kernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipselsystem -
submitted
24-08-2022 22:35
Static task
static1
Behavioral task
behavioral1
Sample
.git/hooks/applypatch-msg.sample
Resource
ubuntu1804-amd64-en-20211208
Behavioral task
behavioral2
Sample
.git/hooks/applypatch-msg.sample
Resource
debian9-armhf-en-20211208
Behavioral task
behavioral3
Sample
.git/hooks/applypatch-msg.sample
Resource
debian9-mipsbe-en-20211208
Behavioral task
behavioral4
Sample
.git/hooks/applypatch-msg.sample
Resource
debian9-mipsel-en-20211208
Behavioral task
behavioral5
Sample
.git/hooks/commit-msg.sample
Resource
ubuntu1804-amd64-en-20211208
Behavioral task
behavioral6
Sample
.git/hooks/commit-msg.sample
Resource
debian9-armhf-en-20211208
Behavioral task
behavioral7
Sample
.git/hooks/commit-msg.sample
Resource
debian9-mipsbe-en-20211208
Behavioral task
behavioral8
Sample
.git/hooks/commit-msg.sample
Resource
debian9-mipsel-en-20211208
Behavioral task
behavioral9
Sample
.git/hooks/fsmonitor-watchman.sample
Resource
ubuntu1804-amd64-en-20211208
Behavioral task
behavioral10
Sample
.git/hooks/fsmonitor-watchman.sample
Resource
debian9-armhf-en-20211208
Behavioral task
behavioral11
Sample
.git/hooks/fsmonitor-watchman.sample
Resource
debian9-mipsbe-en-20211208
Behavioral task
behavioral12
Sample
.git/hooks/fsmonitor-watchman.sample
Resource
debian9-mipsel-en-20211208
Behavioral task
behavioral13
Sample
.git/hooks/post-update.sample
Resource
ubuntu1804-amd64-en-20211208
Behavioral task
behavioral14
Sample
.git/hooks/post-update.sample
Resource
debian9-armhf-en-20211208
Behavioral task
behavioral15
Sample
.git/hooks/post-update.sample
Resource
debian9-mipsbe-en-20211208
Behavioral task
behavioral16
Sample
.git/hooks/post-update.sample
Resource
debian9-mipsel-en-20211208
Behavioral task
behavioral17
Sample
.git/hooks/pre-applypatch.sample
Resource
ubuntu1804-amd64-en-20211208
Behavioral task
behavioral18
Sample
.git/hooks/pre-applypatch.sample
Resource
debian9-armhf-en-20211208
Behavioral task
behavioral19
Sample
.git/hooks/pre-applypatch.sample
Resource
debian9-mipsbe-en-20211208
Behavioral task
behavioral20
Sample
.git/hooks/pre-applypatch.sample
Resource
debian9-mipsel-en-20211208
Behavioral task
behavioral21
Sample
.git/hooks/pre-commit.sample
Resource
ubuntu1804-amd64-en-20211208
Behavioral task
behavioral22
Sample
.git/hooks/pre-commit.sample
Resource
debian9-armhf-en-20211208
Behavioral task
behavioral23
Sample
.git/hooks/pre-commit.sample
Resource
debian9-mipsbe-en-20211208
Behavioral task
behavioral24
Sample
.git/hooks/pre-commit.sample
Resource
debian9-mipsel-en-20211208
Behavioral task
behavioral25
Sample
.git/hooks/pre-push.sample
Resource
ubuntu1804-amd64-en-20211208
Behavioral task
behavioral26
Sample
.git/hooks/pre-push.sample
Resource
debian9-armhf-en-20211208
Behavioral task
behavioral27
Sample
.git/hooks/pre-push.sample
Resource
debian9-mipsbe-en-20211208
Behavioral task
behavioral28
Sample
.git/hooks/pre-push.sample
Resource
debian9-mipsel-en-20211208
Behavioral task
behavioral29
Sample
.git/hooks/pre-rebase.sample
Resource
ubuntu1804-amd64-en-20211208
Behavioral task
behavioral30
Sample
.git/hooks/pre-rebase.sample
Resource
debian9-armhf-en-20211208
Behavioral task
behavioral31
Sample
.git/hooks/pre-rebase.sample
Resource
debian9-mipsbe-en-20211208
Behavioral task
behavioral32
Sample
.git/hooks/pre-rebase.sample
Resource
debian9-mipsel-en-20211208
General
-
Target
.git/hooks/pre-commit.sample
-
Size
1KB
-
MD5
01b1688f97f94776baae85d77b06048b
-
SHA1
36aed8976dcc08b5076844f0ec645b18bc37758f
-
SHA256
12c723235131f1c5576c652ac2a0a007f261a93c0ddc445b1dcee6cd98e30788
-
SHA512
4a7ac2ed2ffe50d2a997c3477b5855c3d19423c295a82f7d660be3418217a183b0ce25f94ae2e350f4d93eda3b75a4bd62cf27f0685d8a837919bcc9e7e0962a
Malware Config
Signatures
-
Writes file to tmp directory 1 IoCs
Malware often drops required files in the /tmp directory.
Processes:
pre-commit.sampledescription ioc process /tmp/.git/hooks/pre-commit.sample /tmp/.git/hooks/pre-commit.sample pre-commit.sample
Processes
-
/tmp/.git/hooks/pre-commit.sample/tmp/.git/hooks/pre-commit.sample1⤵
- Writes file to tmp directory
PID:332
-
/usr/bin/trtr -d "[ -~]\\0"1⤵PID:336
-
/usr/bin/wcwc -c1⤵PID:337
-
/usr/local/sbin/gitgit diff-index --check --cached 4b825dc642cb6eb9a060e54bf8d69288fbee4904 --1⤵PID:332
-
/usr/local/bin/gitgit diff-index --check --cached 4b825dc642cb6eb9a060e54bf8d69288fbee4904 --1⤵PID:332
-
/usr/sbin/gitgit diff-index --check --cached 4b825dc642cb6eb9a060e54bf8d69288fbee4904 --1⤵PID:332
-
/usr/bin/gitgit diff-index --check --cached 4b825dc642cb6eb9a060e54bf8d69288fbee4904 --1⤵PID:332
-
/sbin/gitgit diff-index --check --cached 4b825dc642cb6eb9a060e54bf8d69288fbee4904 --1⤵PID:332
-
/bin/gitgit diff-index --check --cached 4b825dc642cb6eb9a060e54bf8d69288fbee4904 --1⤵PID:332