Overview

overview

5

Static

static

9746fee7b1...86.tar

windows7-x64

3

9746fee7b1...86.tar

windows10-2004-x64

3

usr/bin/davtest

ubuntu-18.04-amd64

5

usr/bin/davtest

debian-9-armhf

5

usr/bin/davtest

debian-9-mips

5

usr/bin/davtest

debian-9-mipsel

5

usr/share/...md.asp

windows7-x64

3

usr/share/...md.asp

windows10-2004-x64

3

usr/share/...md.asp

windows7-x64

3

usr/share/...md.asp

windows10-2004-x64

3

usr/share/...d.html

windows7-x64

1

usr/share/...d.html

windows10-2004-x64

1

usr/share/...md.cgi

ubuntu-18.04-amd64

5

usr/share/...md.cgi

debian-9-armhf

5

usr/share/...md.cgi

debian-9-mips

5

usr/share/...md.cgi

debian-9-mipsel

5

usr/share/...cmd.js

windows7-x64

1

usr/share/...cmd.js

windows10-2004-x64

1

usr/share/...cmd.js

windows7-x64

1

usr/share/...cmd.js

windows10-2004-x64

1

usr/share/...cmd.pl

ubuntu-18.04-amd64

5

usr/share/...cmd.pl

debian-9-armhf

5

usr/share/...cmd.pl

debian-9-mips

5

usr/share/...cmd.pl

debian-9-mipsel

5

usr/share/...est.pl

ubuntu-18.04-amd64

5

usr/share/...est.pl

debian-9-armhf

5

usr/share/...est.pl

debian-9-mips

5

usr/share/...est.pl

debian-9-mipsel

5

Analysis

  • max time kernel
    0s
  • max time network
    160s
  • platform
    debian-9_armhf
  • resource
    debian9-armhf-20221111-en
  • resource tags

    arch:armhfimage:debian9-armhf-20221111-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem
  • submitted
    27-11-2022 18:03

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    usr/share/davtest/davtest.pl

  • Size

    18KB

  • MD5

    651f234aa7def0aa19cc8912fdc7d673

  • SHA1

    87bd4766a51c7e03ba9ef06478334cd3cdca52d8

  • SHA256

    5b3e44c2be8860567f42adbe9a14f38d9eff064800ecb3949c9b45f9fe1f5c13

  • SHA512

    ba95a6723031ea5eb7630a1f5dcec3730c8821322195895ba98d077e6cf7ede83f8785228bee3e270c0236791963fabc62135c7ffbdc36d60210888ad47094cb

  • SSDEEP

    192:4fuxiRGNPRfpoyVIEjzym26s+Ck8yUcCtyAvOn+6oG+sOxSVCyiSCyld+Dy+Zn+Z:4fKi8xT2FioGaBgGJjmnBTj

Score
5/10

Malware Config

Signatures

  • Writes file to tmp directory 1 IoCs

    Malware often drops required files in the /tmp directory.

Processes

  • /tmp/usr/share/davtest/davtest.pl
    /tmp/usr/share/davtest/davtest.pl
    1⤵
    • Writes file to tmp directory
    PID:369

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads