Overview

overview

5

Static

static

rlw

ubuntu-18.04-amd64

5

rlw

debian-9-armhf

5

rlw

debian-9-mips

5

rlw

debian-9-mipsel

5

Analysis

  • max time kernel
    0s
  • platform
    linux_armhf
  • resource
    debian9-armhf-en-20211208
  • resource tags

    arch:armhfimage:debian9-armhf-en-20211208kernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem
  • submitted
    29/09/2022, 13:22

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    rlw
  • Size 5KB
  • Sample220929-qmch6sbaa2
  • SHA256 f7a222442b9330d9764dccc64caea2cc7e9dcfd788bfd75720c85896d78fd2b4
  • MD5 SHA1 SHA512 SSDEEP
Score
5/10

Malware Config

Signatures

  • Writes file to tmp directory 1 IoCs

    Malware often drops required files in the /tmp directory.

Processes

  • /tmp/rlw
    /tmp/rlw
    1⤵
      PID:363
    • /usr/local/sbin/bash
      bash /tmp/rlw
      1⤵
        PID:363
      • /usr/local/bin/bash
        bash /tmp/rlw
        1⤵
          PID:363
        • /usr/sbin/bash
          bash /tmp/rlw
          1⤵
            PID:363
          • /usr/bin/bash
            bash /tmp/rlw
            1⤵
              PID:363
            • /sbin/bash
              bash /tmp/rlw
              1⤵
                PID:363
              • /bin/bash
                bash /tmp/rlw
                1⤵
                • Writes file to tmp directory
                PID:363
              • /usr/bin/dirname
                dirname /tmp/rlw
                1⤵
                  PID:367

                Network

                      MITRE ATT&CK Matrix

                      Replay Monitor

                      Loading Replay Monitor...

                      Downloads