Overview
overview
7Static
static
3controlloi...er.zip
windows7-x64
1controlloi...er.zip
windows10-2004-x64
1controlloi...ignore
windows7-x64
3controlloi...ignore
windows10-2004-x64
3controlloi...ICENSE
windows7-x64
1controlloi...ICENSE
windows10-2004-x64
1controlloi...DME.md
windows7-x64
3controlloi...DME.md
windows10-2004-x64
3controlloi...andler
ubuntu-18.04-amd64
1controlloi...art.sh
ubuntu-18.04-amd64
3controlloi...art.sh
debian-9-armhf
3controlloi...art.sh
debian-9-mips
3controlloi...art.sh
debian-9-mipsel
3controlloi....rules
windows7-x64
3controlloi....rules
windows10-2004-x64
3controlloi...tup.sh
ubuntu-18.04-amd64
3controlloi...tup.sh
debian-9-armhf
3controlloi...tup.sh
debian-9-mips
3controlloi...tup.sh
debian-9-mipsel
3controlloi...HANGES
windows7-x64
1controlloi...HANGES
windows10-2004-x64
1controlloi...DME.js
windows7-x64
1controlloi...DME.js
windows10-2004-x64
1controlloi...ocketd
ubuntu-18.04-amd64
3controlloi...ce.dll
windows7-x64
1controlloi...ce.dll
windows10-2004-x64
1controlloi...er.exe
windows7-x64
1controlloi...er.exe
windows10-2004-x64
1controlloi...rt.bat
windows7-x64
7controlloi...rt.bat
windows10-2004-x64
7controlloi...te.exe
windows7-x64
1controlloi...te.exe
windows10-2004-x64
1Analysis
-
max time kernel
4s -
max time network
1180s -
platform
linux_amd64 -
resource
ubuntu1804-amd64-en-20211208 -
resource tags
arch:amd64arch:i386image:ubuntu1804-amd64-en-20211208kernel:4.15.0-161-genericlocale:en-usos:ubuntu-18.04-amd64system -
submitted
01-07-2023 15:36
Static task
static1
Behavioral task
behavioral1
Sample
controlloid-server-master.zip
Resource
win7-20230621-en
Behavioral task
behavioral2
Sample
controlloid-server-master.zip
Resource
win10v2004-20230621-en
Behavioral task
behavioral3
Sample
controlloid-server-master/.gitignore
Resource
win7-20230621-en
Behavioral task
behavioral4
Sample
controlloid-server-master/.gitignore
Resource
win10v2004-20230621-en
Behavioral task
behavioral5
Sample
controlloid-server-master/LICENSE
Resource
win7-20230621-en
Behavioral task
behavioral6
Sample
controlloid-server-master/LICENSE
Resource
win10v2004-20230621-en
Behavioral task
behavioral7
Sample
controlloid-server-master/README.md
Resource
win7-20230621-en
Behavioral task
behavioral8
Sample
controlloid-server-master/README.md
Resource
win10v2004-20230621-en
Behavioral task
behavioral9
Sample
controlloid-server-master/dist/linux/bin/ws_handler
Resource
ubuntu1804-amd64-20230621-en
Behavioral task
behavioral10
Sample
controlloid-server-master/dist/linux/start.sh
Resource
ubuntu1804-amd64-en-20211208
Behavioral task
behavioral11
Sample
controlloid-server-master/dist/linux/start.sh
Resource
debian9-armhf-20221125-en
Behavioral task
behavioral12
Sample
controlloid-server-master/dist/linux/start.sh
Resource
debian9-mipsbe-20221111-en
Behavioral task
behavioral13
Sample
controlloid-server-master/dist/linux/start.sh
Resource
debian9-mipsel-en-20211208
Behavioral task
behavioral14
Sample
controlloid-server-master/dist/linux/udev/77-controlloid-uinput.rules
Resource
win7-20230621-en
Behavioral task
behavioral15
Sample
controlloid-server-master/dist/linux/udev/77-controlloid-uinput.rules
Resource
win10v2004-20230621-en
Behavioral task
behavioral16
Sample
controlloid-server-master/dist/linux/udev/setup.sh
Resource
ubuntu1804-amd64-20230621-en
Behavioral task
behavioral17
Sample
controlloid-server-master/dist/linux/udev/setup.sh
Resource
debian9-armhf-20221111-en
Behavioral task
behavioral18
Sample
controlloid-server-master/dist/linux/udev/setup.sh
Resource
debian9-mipsbe-en-20211208
Behavioral task
behavioral19
Sample
controlloid-server-master/dist/linux/udev/setup.sh
Resource
debian9-mipsel-20221125-en
Behavioral task
behavioral20
Sample
controlloid-server-master/dist/linux/websocketd/CHANGES
Resource
win7-20230621-en
Behavioral task
behavioral21
Sample
controlloid-server-master/dist/linux/websocketd/CHANGES
Resource
win10v2004-20230621-en
Behavioral task
behavioral22
Sample
controlloid-server-master/dist/linux/websocketd/README.js
Resource
win7-20230621-en
Behavioral task
behavioral23
Sample
controlloid-server-master/dist/linux/websocketd/README.js
Resource
win10v2004-20230621-en
Behavioral task
behavioral24
Sample
controlloid-server-master/dist/linux/websocketd/websocketd
Resource
ubuntu1804-amd64-20230621-en
Behavioral task
behavioral25
Sample
controlloid-server-master/dist/windows/bin/vJoyInterface.dll
Resource
win7-20230621-en
Behavioral task
behavioral26
Sample
controlloid-server-master/dist/windows/bin/vJoyInterface.dll
Resource
win10v2004-20230621-en
Behavioral task
behavioral27
Sample
controlloid-server-master/dist/windows/bin/ws_handler.exe
Resource
win7-20230621-en
Behavioral task
behavioral28
Sample
controlloid-server-master/dist/windows/bin/ws_handler.exe
Resource
win10v2004-20230621-en
Behavioral task
behavioral29
Sample
controlloid-server-master/dist/windows/start.bat
Resource
win7-20230621-en
Behavioral task
behavioral30
Sample
controlloid-server-master/dist/windows/start.bat
Resource
win10v2004-20230621-en
Behavioral task
behavioral31
Sample
controlloid-server-master/dist/windows/vjoy/elevate.exe
Resource
win7-20230621-en
Behavioral task
behavioral32
Sample
controlloid-server-master/dist/windows/vjoy/elevate.exe
Resource
win10v2004-20230621-en
General
-
Target
controlloid-server-master/dist/linux/start.sh
-
Size
414B
-
MD5
9b9aa7636bdb1df9e7da45fe72a29c71
-
SHA1
b4f9643ed86ba2821b57d468467afa38d2bbf40b
-
SHA256
62d7f98315d09ca7fd0e3b2bc34c831bd5fac624988485674a005f9ebc81d375
-
SHA512
60673902da5b2bc899934aa72ec4c4e044cfb86a6119287cc0d05a98fbf43e75b2edbfa62bebe5d378a487b455bfd408769555f9995cb664cf4a4f06d34bcb9c
Malware Config
Signatures
-
Reads runtime system information 1 IoCs
Reads data from /proc virtual filesystem.
description ioc Process File opened for reading /proc/filesystems sed
Processes
-
/tmp/controlloid-server-master/dist/linux/start.sh/tmp/controlloid-server-master/dist/linux/start.sh1⤵PID:575
-
/usr/local/sbin/bashbash /tmp/controlloid-server-master/dist/linux/start.sh1⤵PID:575
-
/usr/local/bin/bashbash /tmp/controlloid-server-master/dist/linux/start.sh1⤵PID:575
-
/usr/sbin/bashbash /tmp/controlloid-server-master/dist/linux/start.sh1⤵PID:575
-
/usr/bin/bashbash /tmp/controlloid-server-master/dist/linux/start.sh1⤵PID:575
-
/sbin/bashbash /tmp/controlloid-server-master/dist/linux/start.sh1⤵PID:575
-
/bin/bashbash /tmp/controlloid-server-master/dist/linux/start.sh1⤵PID:575
-
/usr/bin/dirnamedirname /tmp/controlloid-server-master/dist/linux/start.sh2⤵PID:576
-
-
/sbin/ipip -4 -o addr show scope global2⤵PID:579
-
-
/usr/bin/awkawk "{gsub(/\\/.*/,\"\",\$4); print \$2, \"http://\"\$4\":31415/\"}"2⤵PID:580
-
-
/usr/bin/sortsort2⤵PID:581
-
-
/bin/sedsed "s/\\(http.\\+\\)/[34;4m\\1[0m/"2⤵
- Reads runtime system information
PID:582
-
-
/tmp/controlloid-server-master/dist/linux/websocketd/websocketd./websocketd/websocketd --binary --port 31415 "--staticdir=." ./bin/ws_handler2⤵PID:583
-