Analysis
-
max time kernel
0s -
max time network
155s -
platform
linux_amd64 -
resource
ubuntu1804-amd64-en-20211208 -
resource tags
arch:amd64arch:i386image:ubuntu1804-amd64-en-20211208kernel:4.15.0-161-genericlocale:en-usos:ubuntu-18.04-amd64system -
submitted
23-11-2022 15:48
Static task
static1
Behavioral task
behavioral1
Sample
1c9536ae74850d81225a46c7f503fdc79df79c23fb34f4bb5fd0c0dc6285f7a6
Resource
ubuntu1804-amd64-en-20211208
Behavioral task
behavioral2
Sample
1c9536ae74850d81225a46c7f503fdc79df79c23fb34f4bb5fd0c0dc6285f7a6
Resource
debian9-armhf-20221111-en
Behavioral task
behavioral3
Sample
1c9536ae74850d81225a46c7f503fdc79df79c23fb34f4bb5fd0c0dc6285f7a6
Resource
debian9-mipsbe-20221111-en
Behavioral task
behavioral4
Sample
1c9536ae74850d81225a46c7f503fdc79df79c23fb34f4bb5fd0c0dc6285f7a6
Resource
debian9-mipsel-20221111-en
General
-
Target
1c9536ae74850d81225a46c7f503fdc79df79c23fb34f4bb5fd0c0dc6285f7a6
-
Size
15KB
-
MD5
614d98ac77b9c15815cd31cfcf7840b3
-
SHA1
1e521cb22b27fd0d801a9176ca7d6adcd5bf3821
-
SHA256
1c9536ae74850d81225a46c7f503fdc79df79c23fb34f4bb5fd0c0dc6285f7a6
-
SHA512
9cfc6c092ab2942f6eec8557d1d50bf4e6fea8816c7ba5ce3d5d329c4c1970029a238018fa8ab4cc053686dc2a4ccef0737866205eaa953b634f0b36e7cee9b0
-
SSDEEP
384:ksHYFy+gLES3LnfX9t6tUHef5bUDbGIFgTG10U5VOj:ksHky+gPfyGttFgTY0Nj
Malware Config
Signatures
-
Creates a large amount of network flows 1 TTPs
This may indicate a network scan to discover remotely running services.
-
Writes file to tmp directory 1 IoCs
Malware often drops required files in the /tmp directory.
Processes:
1c9536ae74850d81225a46c7f503fdc79df79c23fb34f4bb5fd0c0dc6285f7a6description ioc process /tmp/1c9536ae74850d81225a46c7f503fdc79df79c23fb34f4bb5fd0c0dc6285f7a6 /tmp/1c9536ae74850d81225a46c7f503fdc79df79c23fb34f4bb5fd0c0dc6285f7a6 1c9536ae74850d81225a46c7f503fdc79df79c23fb34f4bb5fd0c0dc6285f7a6