Overview

overview

10

Static

static

10

Challenge_...m.docx

windows7-x64

4

Challenge_...m.docx

windows10-2004-x64

5

Challenge_...1.docx

windows7-x64

4

Challenge_...1.docx

windows10-2004-x64

1

Challenge_...y.docx

windows7-x64

4

Challenge_...y.docx

windows10-2004-x64

1

Challenge_...1.docx

windows7-x64

4

Challenge_...1.docx

windows10-2004-x64

1

tools/numb...ing.py

ubuntu-18.04-amd64

1

tools/numb...ing.py

debian-9-armhf

1

tools/numb...ing.py

debian-9-mips

1

tools/numb...ing.py

debian-9-mipsel

1

decoder_add1.py

ubuntu-18.04-amd64

1

decoder_add1.py

debian-9-armhf

1

decoder_add1.py

debian-9-mips

1

decoder_add1.py

debian-9-mipsel

1

decoder_ah.py

ubuntu-18.04-amd64

1

decoder_ah.py

debian-9-armhf

1

decoder_ah.py

debian-9-mips

1

decoder_ah.py

debian-9-mipsel

1

decoder_chr.py

ubuntu-18.04-amd64

1

decoder_chr.py

debian-9-armhf

1

decoder_chr.py

debian-9-mips

1

decoder_chr.py

debian-9-mipsel

1

decoder_rol1.py

ubuntu-18.04-amd64

1

decoder_rol1.py

debian-9-armhf

1

decoder_rol1.py

debian-9-mips

1

decoder_rol1.py

debian-9-mipsel

1

decoder_xor1.py

ubuntu-18.04-amd64

1

decoder_xor1.py

debian-9-armhf

1

decoder_xor1.py

debian-9-mips

1

decoder_xor1.py

debian-9-mipsel

1

Analysis

  • max time kernel
    4s
  • max time network
    144s
  • platform
    ubuntu-18.04_amd64
  • resource
    ubuntu1804-amd64-20230712-en
  • resource tags

    arch:amd64arch:i386image:ubuntu1804-amd64-20230712-enkernel:4.15.0-161-genericlocale:en-usos:ubuntu-18.04-amd64system
  • submitted
    24-07-2023 22:32

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    decoder_ah.py

  • Size

    1KB

  • MD5

    e99956971f7cfd746e8f04818b93db46

  • SHA1

    f457eab1ca20f71eb136db827a71e467d95c1664

  • SHA256

    8941b1e1baf50cf2064cc8387631887568075433fb6feb05f06b25fe433bab3e

  • SHA512

    20dd1c3adf7ed254101d14729a706e06df9189715b08bb1d1cf7688006072495db7f5c9e6e8c6620b4796ccdcf0ca5996f5ff4f9cc76f29e4cb2b92404678a9d

Score
1/10

Malware Config

Signatures

Processes

  • /tmp/decoder_ah.py
    /tmp/decoder_ah.py
    1⤵
      PID:588
    • /usr/local/sbin/python
      python /tmp/decoder_ah.py
      1⤵
        PID:588
      • /usr/local/bin/python
        python /tmp/decoder_ah.py
        1⤵
          PID:588
        • /usr/sbin/python
          python /tmp/decoder_ah.py
          1⤵
            PID:588
          • /usr/bin/python
            python /tmp/decoder_ah.py
            1⤵
              PID:588
            • /sbin/python
              python /tmp/decoder_ah.py
              1⤵
                PID:588
              • /bin/python
                python /tmp/decoder_ah.py
                1⤵
                  PID:588

                Network

                MITRE ATT&CK Matrix

                Replay Monitor

                Loading Replay Monitor...

                Downloads