Analysis
-
max time kernel
3s -
platform
ubuntu-18.04_amd64 -
resource
ubuntu1804-amd64-20230621-en -
resource tags
arch:amd64arch:i386image:ubuntu1804-amd64-20230621-enkernel:4.15.0-161-genericlocale:en-usos:ubuntu-18.04-amd64system -
submitted
02/07/2023, 13:10
Static task
static1
Behavioral task
behavioral1
Sample
MARKED.py
Resource
win7-20230621-en
Behavioral task
behavioral2
Sample
MARKED.py
Resource
win10v2004-20230621-en
Behavioral task
behavioral3
Sample
MARKED.py
Resource
ubuntu1804-amd64-20230621-en
Behavioral task
behavioral4
Sample
MARKED.py
Resource
debian9-armhf-20221125-en
Behavioral task
behavioral5
Sample
MARKED.py
Resource
debian9-mipsbe-en-20211208
Behavioral task
behavioral6
Sample
MARKED.py
Resource
debian9-mipsel-20221111-en
General
-
Target
MARKED.py
-
Size
154KB
-
MD5
dfe52568ce06e4b72845c0888d4a8bd0
-
SHA1
cf095cd9dbb91a53b928b12304ad4a5f40bae484
-
SHA256
301b4e259ed534703489e3380175e969458beec1a663f9c7bd20ca7de02bc07f
-
SHA512
18a05db1e9b4749a3fad42f80b81c769f57f875c6beccc9410115cc1453b27fe5bb3588a7770724bd939c5e2bb82a89c046bc4bb224613622f38872ab4b248b2
-
SSDEEP
1536:nWkWRtnHjhFSLLR+YSmM+WrOmDHrTDVLGosIButyU2wr22iUZobGncNvQM:nWkaHjhFCRjKLTDHutyU2Z2iUZ6GntM
Malware Config
Signatures
-
Reads runtime system information 2 IoCs
Reads data from /proc virtual filesystem.
description ioc Process File opened for reading /proc/self/status python3 File opened for reading /proc/mounts python3