Overview
overview
5Static
static
Mail-IspMa...ile.pl
windows7-x64
3Mail-IspMa...ile.pl
windows10-2004-x64
3Mail-IspMa...teD.pl
ubuntu-18.04-amd64
5Mail-IspMa...teD.pl
debian-9-armhf
5Mail-IspMa...teD.pl
debian-9-mips
5Mail-IspMa...teD.pl
debian-9-mipsel
5Mail-IspMa...ar.com
windows7-x64
Mail-IspMa...ar.com
windows10-2004-x64
Mail-IspMa...irscan
ubuntu-18.04-amd64
5Mail-IspMa...irscan
debian-9-armhf
5Mail-IspMa...irscan
debian-9-mips
5Mail-IspMa...irscan
debian-9-mipsel
5Analysis
-
max time kernel
0s -
max time network
126s -
platform
linux_armhf -
resource
debian9-armhf-en-20211208 -
resource tags
arch:armhfimage:debian9-armhf-en-20211208kernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem -
submitted
26-11-2022 01:52
Static task
static1
Behavioral task
behavioral1
Sample
Mail-IspMailGate-1.1011/Makefile.pl
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
Mail-IspMailGate-1.1011/Makefile.pl
Resource
win10v2004-20221111-en
Behavioral task
behavioral3
Sample
Mail-IspMailGate-1.1011/ispMailGateD.pl
Resource
ubuntu1804-amd64-en-20211208
Behavioral task
behavioral4
Sample
Mail-IspMailGate-1.1011/ispMailGateD.pl
Resource
debian9-armhf-en-20211208
Behavioral task
behavioral5
Sample
Mail-IspMailGate-1.1011/ispMailGateD.pl
Resource
debian9-mipsbe-en-20211208
Behavioral task
behavioral6
Sample
Mail-IspMailGate-1.1011/ispMailGateD.pl
Resource
debian9-mipsel-en-20211208
Behavioral task
behavioral7
Sample
Mail-IspMailGate-1.1011/t/eicar.com
Resource
win7-20220901-en
Behavioral task
behavioral8
Sample
Mail-IspMailGate-1.1011/t/eicar.com
Resource
win10v2004-20220812-en
Behavioral task
behavioral9
Sample
Mail-IspMailGate-1.1011/t/virscan
Resource
ubuntu1804-amd64-20221111-en
Behavioral task
behavioral10
Sample
Mail-IspMailGate-1.1011/t/virscan
Resource
debian9-armhf-en-20211208
Behavioral task
behavioral11
Sample
Mail-IspMailGate-1.1011/t/virscan
Resource
debian9-mipsbe-20221111-en
Behavioral task
behavioral12
Sample
Mail-IspMailGate-1.1011/t/virscan
Resource
debian9-mipsel-en-20211208
General
-
Target
Mail-IspMailGate-1.1011/ispMailGateD.pl
-
Size
29KB
-
MD5
28fc297725fa604986c614ec6a1694ea
-
SHA1
ea62b41971729cf9daaebc701a530eaed7ae2f98
-
SHA256
9e5c0cd97de4576ee7b079846f8ac7156c246d038b8df8eda9540d79862267c2
-
SHA512
2df0591623bbdfdacde870347f349381a09712cdd4f655a7b1bf3548a8805ed17d22908066cef895c4daa14d00e0820a0e0a8136e6abfd454b47b616b285092e
-
SSDEEP
768:13IOnGFRBK6QZs4eZHWNZWvo2rlPOpZ+qf/jw:pIrFRdQ2HhWjWX4kqf/8
Malware Config
Signatures
-
Writes file to tmp directory 1 IoCs
Malware often drops required files in the /tmp directory.
Processes:
ispMailGateD.pldescription ioc process /tmp/Mail-IspMailGate-1.1011/ispMailGateD.pl /tmp/Mail-IspMailGate-1.1011/ispMailGateD.pl ispMailGateD.pl