Overview

overview

5

Static

static

rlw

ubuntu-18.04-amd64

5

rlw

debian-9-armhf

5

rlw

debian-9-mips

5

rlw

debian-9-mipsel

5

Analysis

  • max time kernel
    0s
  • max time network
    121s
  • platform
    linux_mips
  • resource
    debian9-mipsbe-en-20211208
  • resource tags

    arch:mipsimage:debian9-mipsbe-en-20211208kernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipssystem
  • submitted
    29/09/2022, 13:22

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    rlw
  • Size 5KB
  • Sample220929-qmch6sbaa2
  • SHA256 f7a222442b9330d9764dccc64caea2cc7e9dcfd788bfd75720c85896d78fd2b4
  • MD5 SHA1 SHA512 SSDEEP
Score
5/10

Malware Config

Signatures

  • Writes file to tmp directory 1 IoCs

    Malware often drops required files in the /tmp directory.

Processes

  • /tmp/rlw
    /tmp/rlw
    1⤵
      PID:320
    • /usr/local/sbin/bash
      bash /tmp/rlw
      1⤵
        PID:320
      • /usr/local/bin/bash
        bash /tmp/rlw
        1⤵
          PID:320
        • /usr/sbin/bash
          bash /tmp/rlw
          1⤵
            PID:320
          • /usr/bin/bash
            bash /tmp/rlw
            1⤵
              PID:320
            • /sbin/bash
              bash /tmp/rlw
              1⤵
                PID:320
              • /bin/bash
                bash /tmp/rlw
                1⤵
                • Writes file to tmp directory
                PID:320
              • /usr/bin/dirname
                dirname /tmp/rlw
                1⤵
                  PID:324

                Network

                      MITRE ATT&CK Matrix

                      Replay Monitor

                      Loading Replay Monitor...

                      Downloads