Overview

overview

5

Static

static

9746fee7b1...86.tar

windows7-x64

3

9746fee7b1...86.tar

windows10-2004-x64

3

usr/bin/davtest

ubuntu-18.04-amd64

5

usr/bin/davtest

debian-9-armhf

5

usr/bin/davtest

debian-9-mips

5

usr/bin/davtest

debian-9-mipsel

5

usr/share/...md.asp

windows7-x64

3

usr/share/...md.asp

windows10-2004-x64

3

usr/share/...md.asp

windows7-x64

3

usr/share/...md.asp

windows10-2004-x64

3

usr/share/...d.html

windows7-x64

1

usr/share/...d.html

windows10-2004-x64

1

usr/share/...md.cgi

ubuntu-18.04-amd64

5

usr/share/...md.cgi

debian-9-armhf

5

usr/share/...md.cgi

debian-9-mips

5

usr/share/...md.cgi

debian-9-mipsel

5

usr/share/...cmd.js

windows7-x64

1

usr/share/...cmd.js

windows10-2004-x64

1

usr/share/...cmd.js

windows7-x64

1

usr/share/...cmd.js

windows10-2004-x64

1

usr/share/...cmd.pl

ubuntu-18.04-amd64

5

usr/share/...cmd.pl

debian-9-armhf

5

usr/share/...cmd.pl

debian-9-mips

5

usr/share/...cmd.pl

debian-9-mipsel

5

usr/share/...est.pl

ubuntu-18.04-amd64

5

usr/share/...est.pl

debian-9-armhf

5

usr/share/...est.pl

debian-9-mips

5

usr/share/...est.pl

debian-9-mipsel

5

Analysis

  • max time kernel
    0s
  • max time network
    123s
  • platform
    linux_mips
  • resource
    debian9-mipsbe-en-20211208
  • resource tags

    arch:mipsimage:debian9-mipsbe-en-20211208kernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipssystem
  • submitted
    27-11-2022 18:03

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    usr/share/davtest/backdoors/perl_cmd.pl

  • Size

    580B

  • MD5

    e64082a3d307a0dd36600b30e90e529c

  • SHA1

    8a036aac2c473b6f1c246bc61483695349919bc5

  • SHA256

    98278a99ae79937d8cdc0aa6feb3b535a267d66627a03e0bfca537a014288bae

  • SHA512

    6e58b5683831ad8d03c8ca0253256a91408d8893606b06be8aa6ec560b2386b70a2e4f6b7b48343730d1e4bf24e74fdf14ec8d4a0d04f5e754d0730e95c66cb6

Score
5/10

Malware Config

Signatures

  • Writes file to tmp directory 1 IoCs

    Malware often drops required files in the /tmp directory.

Processes

  • /tmp/usr/share/davtest/backdoors/perl_cmd.pl
    /tmp/usr/share/davtest/backdoors/perl_cmd.pl
    1⤵
    • Writes file to tmp directory
    PID:324

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads