Overview
overview
5Static
static
scan/a
ubuntu-18.04-amd64
5scan/a
debian-9-armhf
5scan/a
debian-9-mips
5scan/a
debian-9-mipsel
5scan/gen-pass.sh
ubuntu-18.04-amd64
5scan/gen-pass.sh
debian-9-armhf
5scan/gen-pass.sh
debian-9-mips
5scan/gen-pass.sh
debian-9-mipsel
5scan/go.sh
windows7-x64
3scan/go.sh
windows10-2004-x64
3scan/pscan2
ubuntu-18.04-amd64
scan/screen
ubuntu-18.04-amd64
scan/ss
ubuntu-18.04-amd64
1scan/ssh-scan
ubuntu-18.04-amd64
1Analysis
-
max time kernel
0s -
max time network
124s -
platform
linux_armhf -
resource
debian9-armhf-en-20211208 -
resource tags
arch:armhfimage:debian9-armhf-en-20211208kernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem -
submitted
26-11-2022 07:21
Static task
static1
Behavioral task
behavioral1
Sample
scan/a
Resource
ubuntu1804-amd64-en-20211208
Behavioral task
behavioral2
Sample
scan/a
Resource
debian9-armhf-20221111-en
Behavioral task
behavioral3
Sample
scan/a
Resource
debian9-mipsbe-en-20211208
Behavioral task
behavioral4
Sample
scan/a
Resource
debian9-mipsel-20221111-en
Behavioral task
behavioral5
Sample
scan/gen-pass.sh
Resource
ubuntu1804-amd64-en-20211208
Behavioral task
behavioral6
Sample
scan/gen-pass.sh
Resource
debian9-armhf-en-20211208
Behavioral task
behavioral7
Sample
scan/gen-pass.sh
Resource
debian9-mipsbe-20221111-en
Behavioral task
behavioral8
Sample
scan/gen-pass.sh
Resource
debian9-mipsel-en-20211208
Behavioral task
behavioral9
Sample
scan/go.sh
Resource
win7-20221111-en
Behavioral task
behavioral10
Sample
scan/go.sh
Resource
win10v2004-20221111-en
Behavioral task
behavioral11
Sample
scan/pscan2
Resource
ubuntu1804-amd64-20221111-en
Behavioral task
behavioral12
Sample
scan/screen
Resource
ubuntu1804-amd64-en-20211208
Behavioral task
behavioral13
Sample
scan/ss
Resource
ubuntu1804-amd64-20221111-en
Behavioral task
behavioral14
Sample
scan/ssh-scan
Resource
ubuntu1804-amd64-20221111-en
General
-
Target
scan/gen-pass.sh
-
Size
265B
-
MD5
615c08bb1acdf2f21490450991766187
-
SHA1
6fca943c9d31ef25cd9263e576021206943c03d5
-
SHA256
e7031aaa218f814ec442f7fc5cc545980a537d777db491c425d60f0be3366074
-
SHA512
5cc82a0ba4ce23d6598a719fff2406456a9b8708cfd25572044b180ad3bc64365da3dc2b39e07c357bcb7e9a5706db752dc770524410321e9c06fb9d19d6930b
Malware Config
Signatures
-
Writes file to tmp directory 1 IoCs
Malware often drops required files in the /tmp directory.
description ioc Process /tmp/scan/gen-pass.sh /tmp/scan/gen-pass.sh gen-pass.sh