0a47bb8b432a0f90511ce50b6b6bc627ca52151979bbc15a82b52fc8f2a27521 | Triage

Analysis

max time kernel
0s
max time network
103s
platform
linux_amd64
resource
ubuntu1804-amd64-en-20211208
resource tags

arch:amd64arch:i386image:ubuntu1804-amd64-en-20211208kernel:4.15.0-161-genericlocale:en-usos:ubuntu-18.04-amd64system
submitted
29-09-2022 17:29

Sharing

Report Analysis Logs

General

Target

HWID_Spoofer/.git/hooks/post-update.sample
Size

189B
MD5

2b7ea5cee3c49ff53d41e00785eb974c
SHA1

b614c2f63da7dca9f1db2e7ade61ef30448fc96c
SHA256

81765af2daef323061dcbc5e61fc16481cb74b3bac9ad8a174b186523586f6c5
SHA512

473ad124642571656276bf83b9ff63ab1804d3c23a5bdae52391c6f70a894849ac60c10c9d31deff3938922ce83b68b1e60c11592bbf7ea503f4acd39968cefa

Score

5^/10

Malware Config

Signatures

Writes file to tmp directory 1 IoCs

Malware often drops required files in the /tmp directory.

description	ioc	Process
/tmp/HWID_Spoofer/.git/hooks/post-update.sample	/tmp/HWID_Spoofer/.git/hooks/post-update.sample	post-update.sample

/tmp/HWID_Spoofer/.git/hooks/post-update.sample
/tmp/HWID_Spoofer/.git/hooks/post-update.sample
1⤵
- Writes file to tmp directory
PID:580

/usr/local/sbin/git
git update-server-info
1⤵
PID:580

/usr/local/bin/git
git update-server-info
1⤵
PID:580

/usr/sbin/git
git update-server-info
1⤵
PID:580

/usr/bin/git
git update-server-info
1⤵
PID:580

/sbin/git
git update-server-info
1⤵
PID:580

/bin/git
git update-server-info
1⤵
PID:580

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads