19e63c12e7fd743faf5679d4e133f54ce80f40becc8c6cd9a306c8cf34f15aa2

Analysis

max time kernel
0s
max time network
153s
platform
linux_amd64
resource
ubuntu1804-amd64-en-20211208
resource tags

arch:amd64arch:i386image:ubuntu1804-amd64-en-20211208kernel:4.15.0-161-genericlocale:en-usos:ubuntu-18.04-amd64system
submitted
02-09-2022 16:11

Target

d9fba352fedcd79f66a94456871791c7.elf
Size

61KB
MD5

d9fba352fedcd79f66a94456871791c7
SHA1

681d562da9bd59da889934e7ae3c1be4b4918fba
SHA256

19e63c12e7fd743faf5679d4e133f54ce80f40becc8c6cd9a306c8cf34f15aa2
SHA512

9bf73e4377a3fa3bc19e076b9237a93cc87e530333139835f03ce1a430499806019f9b8212f8c2f05a09829d66b9d4b669cc40bccc0dd8751af085d219adf0be
SSDEEP

1536:ujolDRip7t1L0u4o6Kt6POwqU5Ukz887DkKbwhNxrTS+:YolDRipbwsRcOwqUG2jDNYNZS

Score

5^/10

Reads runtime system information 2 IoCs

Reads data from /proc virtual filesystem.

description	ioc	Process
/proc/filesystems	/proc/filesystems	mkdir
/proc/filesystems	/proc/filesystems	mv

/tmp/d9fba352fedcd79f66a94456871791c7.elf
/tmp/d9fba352fedcd79f66a94456871791c7.elf
1⤵
PID:581

/bin/sh
sh -c "rm -rf bin/busybox && mkdir bin; >bin/busybox && mv /tmp/d9fba352fedcd79f66a94456871791c7.elf bin/busybox; chmod 777 bin/busybox"
1⤵
PID:582
- /bin/rm
  rm -rf bin/busybox
  2⤵
  PID:583
- /bin/mkdir
  mkdir bin
  2⤵
  - Reads runtime system information
  PID:584
- /bin/mv
  mv /tmp/d9fba352fedcd79f66a94456871791c7.elf bin/busybox
  2⤵
  - Reads runtime system information
  PID:585
- /bin/chmod
  chmod 777 bin/busybox
  2⤵
  PID:586