0a47bb8b432a0f90511ce50b6b6bc627ca52151979bbc15a82b52fc8f2a27521 | Triage

Analysis

max time kernel
0s
max time network
152s
platform
linux_mipsel
resource
debian9-mipsel-en-20211208
resource tags

arch:mipselimage:debian9-mipsel-en-20211208kernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipselsystem
submitted
29/09/2022, 17:29

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

HWID_Spoofer/.git/hooks/post-update.sample
Size

189B
MD5

2b7ea5cee3c49ff53d41e00785eb974c
SHA1

b614c2f63da7dca9f1db2e7ade61ef30448fc96c
SHA256

81765af2daef323061dcbc5e61fc16481cb74b3bac9ad8a174b186523586f6c5
SHA512

473ad124642571656276bf83b9ff63ab1804d3c23a5bdae52391c6f70a894849ac60c10c9d31deff3938922ce83b68b1e60c11592bbf7ea503f4acd39968cefa

Score

5^/10

Malware Config

Signatures

Writes file to tmp directory 1 IoCs

Malware often drops required files in the /tmp directory.

description	ioc	Process
/tmp/HWID_Spoofer/.git/hooks/post-update.sample	/tmp/HWID_Spoofer/.git/hooks/post-update.sample	post-update.sample

/tmp/HWID_Spoofer/.git/hooks/post-update.sample
/tmp/HWID_Spoofer/.git/hooks/post-update.sample
1⤵
- Writes file to tmp directory
PID:327

/usr/local/sbin/git
git update-server-info
1⤵
PID:327

/usr/local/bin/git
git update-server-info
1⤵
PID:327

/usr/sbin/git
git update-server-info
1⤵
PID:327

/usr/bin/git
git update-server-info
1⤵
PID:327

/sbin/git
git update-server-info
1⤵
PID:327

/bin/git
git update-server-info
1⤵
PID:327

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads