Overview

overview

10

Static

static

10

sshf

ubuntu-18.04-amd64

5

Resubmissions

24/01/2023, 05:04

230124-fqcm8sgg4710

24/01/2023, 02:08

230124-ckk6msgd6410

Analysis

  • max time kernel
    35555s
  • max time network
    600s
  • platform
    linux_amd64
  • resource
    ubuntu1804-amd64-en-20211208
  • resource tags

    arch:amd64arch:i386image:ubuntu1804-amd64-en-20211208kernel:4.15.0-161-genericlocale:en-usos:ubuntu-18.04-amd64system
  • submitted
    24/01/2023, 05:04

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    sshf
  • Size 8.8MB
  • Sample230124-fqcm8sgg47
  • SHA256 0a5eebf19ccfe92a2216c492d6929f9cac72ef37089390572d4e21d0932972c8
  • MD5 SHA1 SHA512 SSDEEP
Score
5/10

Malware Config

Signatures

  • Writes file to tmp directory 1 IoCs

    Malware often drops required files in the /tmp directory.

Processes

  • /tmp/sshf
    /tmp/sshf
    1⤵
      PID:571
      • /bin/bash
        bash -c "/tmp/sshf > /dev/null 2>&1 &"
        2⤵
          PID:575
          • /tmp/sshf
            /tmp/sshf
            3⤵
            • Writes file to tmp directory
            PID:576

      Network

            MITRE ATT&CK Matrix

            Replay Monitor

            Loading Replay Monitor...

            Downloads