Analysis
-
max time kernel
0s -
max time network
153s -
platform
linux_mipsel -
resource
debian9-mipsel-en-20211208 -
resource tags
arch:mipselimage:debian9-mipsel-en-20211208kernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipselsystem -
submitted
28-11-2022 18:59
Static task
static1
Behavioral task
behavioral1
Sample
877056446a26876a1e5f500c766cb4d8b110a3854ca4e7d907b73af6c54dd232
Resource
ubuntu1804-amd64-20221111-en
Behavioral task
behavioral2
Sample
877056446a26876a1e5f500c766cb4d8b110a3854ca4e7d907b73af6c54dd232
Resource
debian9-armhf-en-20211208
Behavioral task
behavioral3
Sample
877056446a26876a1e5f500c766cb4d8b110a3854ca4e7d907b73af6c54dd232
Resource
debian9-mipsbe-20221111-en
Behavioral task
behavioral4
Sample
877056446a26876a1e5f500c766cb4d8b110a3854ca4e7d907b73af6c54dd232
Resource
debian9-mipsel-en-20211208
General
-
Target
877056446a26876a1e5f500c766cb4d8b110a3854ca4e7d907b73af6c54dd232
-
Size
248B
-
MD5
f46d8a17ffeae4e0c5cb1d6a391da389
-
SHA1
426c1938e53e46f4d00005086128da9e74bd9c5a
-
SHA256
877056446a26876a1e5f500c766cb4d8b110a3854ca4e7d907b73af6c54dd232
-
SHA512
f70e5d43c26875784f2e6774d0a133e37aef49e04e99decbd970707d1573d6233887d606b4c8bda913c0427e542771bbf75c3c086f0f2b823ce9798dea249a9a
Malware Config
Signatures
-
Writes file to tmp directory 1 IoCs
Malware often drops required files in the /tmp directory.
Processes:
bashdescription ioc process /tmp/877056446a26876a1e5f500c766cb4d8b110a3854ca4e7d907b73af6c54dd232 /tmp/877056446a26876a1e5f500c766cb4d8b110a3854ca4e7d907b73af6c54dd232 bash
Processes
-
/tmp/877056446a26876a1e5f500c766cb4d8b110a3854ca4e7d907b73af6c54dd232/tmp/877056446a26876a1e5f500c766cb4d8b110a3854ca4e7d907b73af6c54dd2321⤵
-
/usr/local/sbin/bashbash /tmp/877056446a26876a1e5f500c766cb4d8b110a3854ca4e7d907b73af6c54dd2321⤵
-
/usr/local/bin/bashbash /tmp/877056446a26876a1e5f500c766cb4d8b110a3854ca4e7d907b73af6c54dd2321⤵
-
/usr/sbin/bashbash /tmp/877056446a26876a1e5f500c766cb4d8b110a3854ca4e7d907b73af6c54dd2321⤵
-
/usr/bin/bashbash /tmp/877056446a26876a1e5f500c766cb4d8b110a3854ca4e7d907b73af6c54dd2321⤵
-
/sbin/bashbash /tmp/877056446a26876a1e5f500c766cb4d8b110a3854ca4e7d907b73af6c54dd2321⤵
-
/bin/bashbash /tmp/877056446a26876a1e5f500c766cb4d8b110a3854ca4e7d907b73af6c54dd2321⤵
- Writes file to tmp directory