Analysis
-
max time kernel
0s -
max time network
164s -
platform
debian-9_mips -
resource
debian9-mipsbe-20221111-en -
resource tags
arch:mipsimage:debian9-mipsbe-20221111-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipssystem -
submitted
26-11-2022 21:58
Static task
static1
Behavioral task
behavioral1
Sample
870ac6d064d4e2d12635646dbc57fee26b3623987be27ad49a1cef380a326ab9
Resource
ubuntu1804-amd64-20221111-en
Behavioral task
behavioral2
Sample
870ac6d064d4e2d12635646dbc57fee26b3623987be27ad49a1cef380a326ab9
Resource
debian9-armhf-en-20211208
Behavioral task
behavioral3
Sample
870ac6d064d4e2d12635646dbc57fee26b3623987be27ad49a1cef380a326ab9
Resource
debian9-mipsbe-20221111-en
Behavioral task
behavioral4
Sample
870ac6d064d4e2d12635646dbc57fee26b3623987be27ad49a1cef380a326ab9
Resource
debian9-mipsel-en-20211208
General
-
Target
870ac6d064d4e2d12635646dbc57fee26b3623987be27ad49a1cef380a326ab9
-
Size
15KB
-
MD5
ce310ff1f4d2b292fe47933f7f5a33c5
-
SHA1
d85fcd0498baddd8993ba9a87c9ea7f4265fe894
-
SHA256
870ac6d064d4e2d12635646dbc57fee26b3623987be27ad49a1cef380a326ab9
-
SHA512
2809533ee0f190610c26cdc247e8c55de58b4a86d41549868ab6b22e4a388837a19e3a1cef94fbd955b7a3bc7ff30ea6fa494f0d73fd63e0eb8f5204236f8ad1
-
SSDEEP
384:As+5X95+xdcjTrqe20ttoHrf5bUD7GIVONM/8AkW:As+Z95+0uea0NVONy8vW
Malware Config
Signatures
-
Writes file to tmp directory 1 IoCs
Malware often drops required files in the /tmp directory.
Processes:
870ac6d064d4e2d12635646dbc57fee26b3623987be27ad49a1cef380a326ab9description ioc process /tmp/870ac6d064d4e2d12635646dbc57fee26b3623987be27ad49a1cef380a326ab9 /tmp/870ac6d064d4e2d12635646dbc57fee26b3623987be27ad49a1cef380a326ab9 870ac6d064d4e2d12635646dbc57fee26b3623987be27ad49a1cef380a326ab9
Processes
-
/tmp/870ac6d064d4e2d12635646dbc57fee26b3623987be27ad49a1cef380a326ab9/tmp/870ac6d064d4e2d12635646dbc57fee26b3623987be27ad49a1cef380a326ab91⤵
- Writes file to tmp directory
-
/usr/local/sbin/unameuname2⤵
-
/usr/local/bin/unameuname2⤵
-
/usr/sbin/unameuname2⤵
-
/usr/bin/unameuname2⤵
-
/sbin/unameuname2⤵
-
/bin/unameuname2⤵