Behavioral task
behavioral1
Sample
home/loner/ctf/tmp/kdevtmpfsi
Resource
ubuntu1804-amd64-en-20211208
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
home/loner/ctf/tmp/kinsing
Resource
ubuntu1804-amd64-20230831-en
14 signatures
150 seconds
Behavioral task
behavioral3
Sample
home/loner/ctf/tmp/libsystem.so
Resource
ubuntu1804-amd64-20230831-en
0 signatures
150 seconds
General
-
Target
ctf 22 sept.zip
-
Size
4.3MB
-
MD5
360bf5f67b1556b6bce9b2009a5ca063
-
SHA1
75a9d4d52aff032fa2282ab3880bbfa030557b8e
-
SHA256
09f6ee2bc3adcda202f2d4322c80bd93bb510c7bc21dfe578b433649b88129a4
-
SHA512
0c5ef4ca88ed9c280e4de2e0b6f17a8391c20fbc37f147d621e38658440bb09bfe844104f19ae997f14611c4819a8ef5ebc3e741c7a21846f6f678386365bee7
-
SSDEEP
98304:pgiA8XYTrmQCxbfep0IubzHfAIEwHDW1fsywICxJpRpWfLLGiXYRFKMgVo:Gv+qmQsbxv+eW1stWzLGiXoKTo
Score
7/10
Malware Config
Signatures
-
resource yara_rule static1/unpack001/home/loner/ctf/tmp/kdevtmpfsi upx
Files
-
ctf 22 sept.zip.zip
Password: infected
-
home/loner/ctf/tmp/.ICEd-unix/uuid
-
home/loner/ctf/tmp/kdevtmpfsi.elf linux x64
-
home/loner/ctf/tmp/kinsing.elf linux x64
-
home/loner/ctf/tmp/libsystem.so.elf linux x64