Analysis
-
max time kernel
22579s -
max time network
148s -
platform
linux_amd64 -
resource
ubuntu1804-amd64-en-20211208 -
resource tags
arch:amd64arch:i386image:ubuntu1804-amd64-en-20211208kernel:4.15.0-161-genericlocale:en-usos:ubuntu-18.04-amd64system -
submitted
27-08-2022 00:47
Behavioral task
behavioral1
Sample
supercat.x86-20220827-0046
Resource
ubuntu1804-amd64-en-20211208
ubuntu-18.04-amd64
1 signatures
150 seconds
General
-
Target
supercat.x86-20220827-0046
-
Size
58KB
-
MD5
3b93f2bd2c343bd12fd4f62f10b64e45
-
SHA1
18e2ceae75ae08ffdaa3eace87e132db72b4124b
-
SHA256
64c88e15c915138619d1ecf40835402e42c2d0e05163f1ba4d472a5e88991f31
-
SHA512
5373b7fd17b2e681e7625e6d2c3177e0cc5d906ba762ae806393efe7e6b100e60382b27d0e8b346e7a5ecb376f0557a113e37fc83662a9d89c25d935020737cd
-
SSDEEP
1536:CnfFgVR8uUpHdrD8+c05jpLgxKH+0BSXm9rhs:AfFgVRIXrI+csVcxGMmLs
Score
5/10
Malware Config
Signatures
-
Reads runtime system information 2 IoCs
Reads data from /proc virtual filesystem.
description ioc Process /proc/filesystems /proc/filesystems mv /proc/filesystems /proc/filesystems mkdir
Processes
-
/tmp/supercat.x86-20220827-0046/tmp/supercat.x86-20220827-00461⤵PID:577
-
/bin/shsh -c "rm -rf bin/busybox && mkdir bin; >bin/busybox && mv /tmp/supercat.x86-20220827-0046 bin/busybox; chmod 777 bin/busybox"1⤵PID:578
-
/bin/rmrm -rf bin/busybox2⤵PID:579
-
-
/bin/mkdirmkdir bin2⤵
- Reads runtime system information
PID:580
-
-
/bin/mvmv /tmp/supercat.x86-20220827-0046 bin/busybox2⤵
- Reads runtime system information
PID:581
-
-
/bin/chmodchmod 777 bin/busybox2⤵PID:582
-