Overview
overview
5Static
static
scan/a
ubuntu-18.04-amd64
5scan/a
debian-9-armhf
5scan/a
debian-9-mips
5scan/a
debian-9-mipsel
5scan/gen-pass.sh
ubuntu-18.04-amd64
5scan/gen-pass.sh
debian-9-armhf
5scan/gen-pass.sh
debian-9-mips
5scan/gen-pass.sh
debian-9-mipsel
5scan/go.sh
windows7-x64
3scan/go.sh
windows10-2004-x64
3scan/pscan2
ubuntu-18.04-amd64
scan/screen
ubuntu-18.04-amd64
scan/ss
ubuntu-18.04-amd64
1scan/ssh-scan
ubuntu-18.04-amd64
1Analysis
-
max time kernel
0s -
max time network
127s -
platform
debian-9_armhf -
resource
debian9-armhf-20221111-en -
resource tags
arch:armhfimage:debian9-armhf-20221111-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem -
submitted
26-11-2022 07:21
Static task
static1
Behavioral task
behavioral1
Sample
scan/a
Resource
ubuntu1804-amd64-en-20211208
Behavioral task
behavioral2
Sample
scan/a
Resource
debian9-armhf-20221111-en
Behavioral task
behavioral3
Sample
scan/a
Resource
debian9-mipsbe-en-20211208
Behavioral task
behavioral4
Sample
scan/a
Resource
debian9-mipsel-20221111-en
Behavioral task
behavioral5
Sample
scan/gen-pass.sh
Resource
ubuntu1804-amd64-en-20211208
Behavioral task
behavioral6
Sample
scan/gen-pass.sh
Resource
debian9-armhf-en-20211208
Behavioral task
behavioral7
Sample
scan/gen-pass.sh
Resource
debian9-mipsbe-20221111-en
Behavioral task
behavioral8
Sample
scan/gen-pass.sh
Resource
debian9-mipsel-en-20211208
Behavioral task
behavioral9
Sample
scan/go.sh
Resource
win7-20221111-en
Behavioral task
behavioral10
Sample
scan/go.sh
Resource
win10v2004-20221111-en
Behavioral task
behavioral11
Sample
scan/pscan2
Resource
ubuntu1804-amd64-20221111-en
Behavioral task
behavioral12
Sample
scan/screen
Resource
ubuntu1804-amd64-en-20211208
Behavioral task
behavioral13
Sample
scan/ss
Resource
ubuntu1804-amd64-20221111-en
Behavioral task
behavioral14
Sample
scan/ssh-scan
Resource
ubuntu1804-amd64-20221111-en
General
-
Target
scan/a
-
Size
1KB
-
MD5
d82ce85b96da4df32e5f7dc8a55e22e4
-
SHA1
ac978e3339520e28cacb2731fa3017e29dc24fe8
-
SHA256
11e43d97a82c068e62a342b5fd9cb1ce623e8d46341bc1eb6df94fcd6e238e22
-
SHA512
b2fb9c2bb5514ad4c1bfdd6603f675f39f528a8db27c7c67789817828648d987c14c5e9f1fb5f20553e79675e1bf12b7c1f2e29c1a7ae8e99641cddd148faa8a
Malware Config
Signatures
-
Writes file to tmp directory 1 IoCs
Malware often drops required files in the /tmp directory.
description ioc Process /tmp/scan/a /tmp/scan/a a