9aa151a1b50d135e73710085938c31052e70d9e4e06f838a3574dd8ef43716d1

Resubmissions

23/03/2023, 14:02

23/03/2023, 14:02

23/03/2023, 14:01

23/03/2023, 14:00

23/03/2023, 13:01

23/03/2023, 11:37

23/03/2023, 11:24

max time kernel
0s
platform
debian-9_mipsel
resource
debian9-mipsel-20221111-en
resource tags

arch:mipselimage:debian9-mipsel-20221111-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipselsystem
submitted
23/03/2023, 14:00

Target

9aa151a1b50d135e73710085938c31052e70d9e4e06f838a3574dd8ef43716d1.sh
Size

839B
MD5

b781f0e3eb4f9ea90046e6950c0605ef
SHA1

65e118cb3bea542c8adaabe586f28b37b6b79734
SHA256

9aa151a1b50d135e73710085938c31052e70d9e4e06f838a3574dd8ef43716d1
SHA512

5df51847a4d9c95bd6dfb5442f6fea4031b687e7ce62e056b2ec8937e888c5cb994583973a610329258387e1f14312c9f11aa4b9ba61d756aa64fbcb9c2b7ca8

Score

5^/10

Reads runtime system information 1 IoCs

Reads data from /proc virtual filesystem.

description	ioc	Process
/proc/filesystems	/proc/filesystems	mkdir

Writes file to tmp directory 1 IoCs

Malware often drops required files in the /tmp directory.

description	ioc	Process
/tmp/9aa151a1b50d135e73710085938c31052e70d9e4e06f838a3574dd8ef43716d1.sh	/tmp/9aa151a1b50d135e73710085938c31052e70d9e4e06f838a3574dd8ef43716d1.sh	9aa151a1b50d135e73710085938c31052e70d9e4e06f838a3574dd8ef43716d1.sh

/tmp/9aa151a1b50d135e73710085938c31052e70d9e4e06f838a3574dd8ef43716d1.sh
/tmp/9aa151a1b50d135e73710085938c31052e70d9e4e06f838a3574dd8ef43716d1.sh
1⤵
- Writes file to tmp directory
PID:322
- /bin/mkdir
  mkdir images0
  2⤵
  - Reads runtime system information
  PID:323
- /usr/bin/awk
  awk "NR>\$number" ../processed/simplified_artwork_data.csv
  2⤵
  PID:324