0a47bb8b432a0f90511ce50b6b6bc627ca52151979bbc15a82b52fc8f2a27521

Analysis

max time kernel
0s
max time network
158s
platform
linux_armhf
resource
debian9-armhf-en-20211208
resource tags

arch:armhfimage:debian9-armhf-en-20211208kernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem
submitted
29-09-2022 17:29

Target

HWID_Spoofer/.git/hooks/fsmonitor-watchman.sample
Size

4KB
MD5

ea587b0fae70333bce92257152996e70
SHA1

118ff5509f187039734d04456bf01e44c933ac19
SHA256

f3c0228d8e827f1c5260ac59fdd92c3d425c46e54711ef713c5a54ae0a4db2b4
SHA512

f5a4d2bff93161eb61b9902ff74d5ee20de3316f2b1c5ad49299deaf1adf231848c5501b6e4a840e5b898791f86c66eed6f3b05ff573073674177a33a1f2ae9c
SSDEEP

96:GFCscBOvOFXDgRvi/3eCwX9PlkRo/j5SpoNOBoi+geBIzCa:GFCsEOmWRamCwX9PqRo7geEk3IzCa

Score

5^/10

Writes file to tmp directory 1 IoCs

Malware often drops required files in the /tmp directory.

description	ioc	Process
/tmp/HWID_Spoofer/.git/hooks/fsmonitor-watchman.sample	/tmp/HWID_Spoofer/.git/hooks/fsmonitor-watchman.sample	fsmonitor-watchman.sample

/tmp/HWID_Spoofer/.git/hooks/fsmonitor-watchman.sample
/tmp/HWID_Spoofer/.git/hooks/fsmonitor-watchman.sample
1⤵
- Writes file to tmp directory
PID:347