Analysis
-
max time kernel
1583s -
max time network
151s -
platform
ubuntu-18.04_amd64 -
resource
ubuntu1804-amd64-20221111-en -
resource tags
arch:amd64arch:i386image:ubuntu1804-amd64-20221111-enkernel:4.15.0-161-genericlocale:en-usos:ubuntu-18.04-amd64system -
submitted
28-11-2022 19:14
Static task
static1
Behavioral task
behavioral1
Sample
2ac9d3ec6c47ccde2296f7f7e1a8753fecaf3cc711dbb60ad1409ad2262af1b3
Resource
ubuntu1804-amd64-20221111-en
Behavioral task
behavioral2
Sample
2ac9d3ec6c47ccde2296f7f7e1a8753fecaf3cc711dbb60ad1409ad2262af1b3
Resource
debian9-armhf-20221111-en
Behavioral task
behavioral3
Sample
2ac9d3ec6c47ccde2296f7f7e1a8753fecaf3cc711dbb60ad1409ad2262af1b3
Resource
debian9-mipsbe-en-20211208
Behavioral task
behavioral4
Sample
2ac9d3ec6c47ccde2296f7f7e1a8753fecaf3cc711dbb60ad1409ad2262af1b3
Resource
debian9-mipsel-20221111-en
General
-
Target
2ac9d3ec6c47ccde2296f7f7e1a8753fecaf3cc711dbb60ad1409ad2262af1b3
-
Size
31KB
-
MD5
ca920322074c2d39a5d0e1d48a5d5700
-
SHA1
0009546e7a3fbc1de6c6d36b3759ca3618158e7c
-
SHA256
2ac9d3ec6c47ccde2296f7f7e1a8753fecaf3cc711dbb60ad1409ad2262af1b3
-
SHA512
f94677399749615189d3a727d7756e26bca667bf684ce475526599b62830f2e40f775635023c566eeb1093f7f6d7b51d831af6088320409b6af051995aad24c5
-
SSDEEP
384:f7MfsJZUM778JDWbl1siahkMfd43+yZK53lx:fesJZT778JAyiGRyE53z
Malware Config
Signatures
-
Writes file to tmp directory 1 IoCs
Malware often drops required files in the /tmp directory.
Processes:
2ac9d3ec6c47ccde2296f7f7e1a8753fecaf3cc711dbb60ad1409ad2262af1b3description ioc process /tmp/2ac9d3ec6c47ccde2296f7f7e1a8753fecaf3cc711dbb60ad1409ad2262af1b3 /tmp/2ac9d3ec6c47ccde2296f7f7e1a8753fecaf3cc711dbb60ad1409ad2262af1b3 2ac9d3ec6c47ccde2296f7f7e1a8753fecaf3cc711dbb60ad1409ad2262af1b3
Processes
-
/tmp/2ac9d3ec6c47ccde2296f7f7e1a8753fecaf3cc711dbb60ad1409ad2262af1b3/tmp/2ac9d3ec6c47ccde2296f7f7e1a8753fecaf3cc711dbb60ad1409ad2262af1b31⤵
- Writes file to tmp directory
-
/usr/local/sbin/unameuname -sr2⤵
-
/usr/local/bin/unameuname -sr2⤵
-
/usr/sbin/unameuname -sr2⤵
-
/usr/bin/unameuname -sr2⤵
-
/sbin/unameuname -sr2⤵
-
/bin/unameuname -sr2⤵