f572625514b52dde4e2b6e567b8e2738b133e50ee3c5b31d80016117440311fe | Triage

Analysis

max time kernel
0s
max time network
158s
platform
linux_armhf
resource
debian9-armhf-en-20211208
resource tags

arch:armhfimage:debian9-armhf-en-20211208kernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem
submitted
02-10-2022 23:14

Sharing

Report Analysis Logs

General

Target

netpbm-10.73.41/buildtools/installosf
Size

780B
MD5

0cf0303c5188de620d162124996e9d18
SHA1

7d1905b921bc8b0c660b4fb0c5f43b6e7bdb29a5
SHA256

89be0394e9272e642be2481cc45234ef014f725bba86aa31d0215ca9873fff1e
SHA512

6fc41564c3744b0840ef147e2c7ef58d797098e728b767cd5bb4f15b84b9fbae378fa1c1d13257b4ee3db5c48738dfee9815f9cc358ed67b5ec1100e12440b5b

Score

5^/10

Malware Config

Signatures

Reads runtime system information 1 IoCs

Reads data from /proc virtual filesystem.

description	ioc	Process
/proc/filesystems	/proc/filesystems	install

Writes file to tmp directory 1 IoCs

Malware often drops required files in the /tmp directory.

description	ioc	Process
/tmp/netpbm-10.73.41/buildtools/installosf	/tmp/netpbm-10.73.41/buildtools/installosf	installosf

/tmp/netpbm-10.73.41/buildtools/installosf
/tmp/netpbm-10.73.41/buildtools/installosf
1⤵
- Writes file to tmp directory
PID:347
- /usr/bin/install
  install -f -m 444
  2⤵
  - Reads runtime system information
  PID:351

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads