Overview

overview

9

Static

static

bruteratel...LA.pdf

windows7-x64

1

bruteratel...LA.pdf

windows10-2004-x64

5

bruteratel...eC2.py

ubuntu-18.04-amd64

9

bruteratel...eC2.py

debian-9-armhf

bruteratel...eC2.py

debian-9-mips

bruteratel...eC2.py

debian-9-mipsel

bruteratel...sgs.py

ubuntu-18.04-amd64

1

bruteratel...sgs.py

debian-9-armhf

bruteratel...sgs.py

debian-9-mips

bruteratel...sgs.py

debian-9-mipsel

bruteratel...ner.py

ubuntu-18.04-amd64

9

bruteratel...ner.py

debian-9-armhf

bruteratel...ner.py

debian-9-mips

bruteratel...ner.py

debian-9-mipsel

bruteratel...ier.py

ubuntu-18.04-amd64

9

bruteratel...ier.py

debian-9-armhf

bruteratel...ier.py

debian-9-mips

bruteratel...ier.py

debian-9-mipsel

bruteratel...ssl.sh

ubuntu-18.04-amd64

5

bruteratel...ssl.sh

debian-9-armhf

5

bruteratel...ssl.sh

debian-9-mips

1

bruteratel...ssl.sh

debian-9-mipsel

1

bruteratel...all.sh

ubuntu-18.04-amd64

8

bruteratel...all.sh

debian-9-armhf

1

bruteratel...all.sh

debian-9-mips

8

bruteratel...all.sh

debian-9-mipsel

8

bruteratel...ver.sh

ubuntu-18.04-amd64

5

bruteratel...ver.sh

debian-9-armhf

1

bruteratel...ver.sh

debian-9-mips

5

bruteratel...ver.sh

debian-9-mipsel

5

bruteratel...armx64

ubuntu-18.04-amd64

bruteratel...armx64

debian-9-armhf

Analysis

  • max time kernel
    0s
  • max time network
    103s
  • platform
    linux_amd64
  • resource
    ubuntu1804-amd64-en-20211208
  • resource tags

    arch:amd64arch:i386image:ubuntu1804-amd64-en-20211208kernel:4.15.0-161-genericlocale:en-usos:ubuntu-18.04-amd64system
  • submitted
    28/09/2022, 13:48

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    bruteratel/adhoc_scripts/openssl_server.sh

  • Size

    112B

  • MD5

    8316ca8f06d9d5bed9bd65664f66c3a1

  • SHA1

    14a7508bb1bcdd5354074b50b3bba3c56b573fa7

  • SHA256

    6210719127067d5040b6fe72739e2cdbadbf54df59cc518efbfb3407af32f9ab

  • SHA512

    6531e923fedb44edd8f69e7f9b0665115534e9876f10f137a54358ccdde6313daeca1aa1f5c778a357635a40727ee47f1a002b51cd8e16a032e774853f20901a

Score
5/10

Malware Config

Signatures

  • Writes file to tmp directory 1 IoCs

    Malware often drops required files in the /tmp directory.

Processes

  • /tmp/bruteratel/adhoc_scripts/openssl_server.sh
    /tmp/bruteratel/adhoc_scripts/openssl_server.sh
    1⤵
    • Writes file to tmp directory
    PID:577
    • /usr/bin/openssl
      openssl s_server -key key.pem -cert cert.pem -accept 443
      2⤵
        PID:578

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads