19e63c12e7fd743faf5679d4e133f54ce80f40becc8c6cd9a306c8cf34f15aa2

Analysis

max time kernel
0s
max time network
175s
platform
linux_amd64
resource
ubuntu1804-amd64-en-20211208
resource tags

arch:amd64arch:i386image:ubuntu1804-amd64-en-20211208kernel:4.15.0-161-genericlocale:en-usos:ubuntu-18.04-amd64system
submitted
07-09-2022 19:21

Target

19e63c12e7fd743faf5679d4e133f54ce80f40becc8c6cd9a306c8cf34f15aa2.bin
Size

61KB
MD5

d9fba352fedcd79f66a94456871791c7
SHA1

681d562da9bd59da889934e7ae3c1be4b4918fba
SHA256

19e63c12e7fd743faf5679d4e133f54ce80f40becc8c6cd9a306c8cf34f15aa2
SHA512

9bf73e4377a3fa3bc19e076b9237a93cc87e530333139835f03ce1a430499806019f9b8212f8c2f05a09829d66b9d4b669cc40bccc0dd8751af085d219adf0be
SSDEEP

1536:ujolDRip7t1L0u4o6Kt6POwqU5Ukz887DkKbwhNxrTS+:YolDRipbwsRcOwqUG2jDNYNZS

Score

5^/10

Reads runtime system information 2 IoCs

Reads data from /proc virtual filesystem.

description	ioc	Process
/proc/filesystems	/proc/filesystems	mkdir
/proc/filesystems	/proc/filesystems	mv

/tmp/19e63c12e7fd743faf5679d4e133f54ce80f40becc8c6cd9a306c8cf34f15aa2.bin
/tmp/19e63c12e7fd743faf5679d4e133f54ce80f40becc8c6cd9a306c8cf34f15aa2.bin
1⤵
PID:580

/bin/sh
sh -c "rm -rf bin/systemd && mkdir bin; >bin/systemd && mv /tmp/19e63c12e7fd743faf5679d4e133f54ce80f40becc8c6cd9a306c8cf34f15aa2.bin bin/systemd; chmod 777 bin/systemd"
1⤵
PID:581
- /bin/rm
  rm -rf bin/systemd
  2⤵
  PID:582
- /bin/mkdir
  mkdir bin
  2⤵
  - Reads runtime system information
  PID:583
- /bin/mv
  mv /tmp/19e63c12e7fd743faf5679d4e133f54ce80f40becc8c6cd9a306c8cf34f15aa2.bin bin/systemd
  2⤵
  - Reads runtime system information
  PID:584
- /bin/chmod
  chmod 777 bin/systemd
  2⤵
  PID:585