Overview
overview
3Static
static
3dosia.zip
windows7-x64
1dosia.zip
windows10-2004-x64
1d_lin_arm
debian-9-armhf
3d_lin_x64
ubuntu-18.04-amd64
3d_mac_arm64
macos-10.15-amd64
1d_mac_x64
macos-10.15-amd64
1d_win_arm64.exe
windows7-x64
d_win_arm64.exe
windows10-2004-x64
d_win_x64.exe
windows7-x64
1d_win_x64.exe
windows10-2004-x64
1Analysis
-
max time kernel
11s -
max time network
221s -
platform
debian-9_armhf -
resource
debian9-armhf-20230831-en -
resource tags
arch:armhfimage:debian9-armhf-20230831-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem -
submitted
24/09/2023, 23:40
Static task
static1
Behavioral task
behavioral1
Sample
dosia.zip
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
dosia.zip
Resource
win10v2004-20230915-en
Behavioral task
behavioral3
Sample
d_lin_arm
Resource
debian9-armhf-20230831-en
Behavioral task
behavioral4
Sample
d_lin_x64
Resource
ubuntu1804-amd64-20230831-en
Behavioral task
behavioral5
Sample
d_mac_arm64
Resource
macos-20230831-en
Behavioral task
behavioral6
Sample
d_mac_x64
Resource
macos-20230831-en
Behavioral task
behavioral7
Sample
d_win_arm64.exe
Resource
win7-20230831-en
Behavioral task
behavioral8
Sample
d_win_arm64.exe
Resource
win10v2004-20230915-en
Behavioral task
behavioral9
Sample
d_win_x64.exe
Resource
win7-20230831-en
Behavioral task
behavioral10
Sample
d_win_x64.exe
Resource
win10v2004-20230915-en
General
-
Target
d_lin_arm
-
Size
7.1MB
-
MD5
7e740324e2332626c0f937989df50bc2
-
SHA1
d94daa7766e57ac2dcec6e781a89e6fc31b8ce31
-
SHA256
51fa04caddfec5631e9a250a5945afb0ade651dcd82e88b4ab0d0245b4a23cb2
-
SHA512
b01b1624f8e2d0cfff1bc8f21db3f56ab0ce5689414842965b0a9c9bbcabf4f4578ca4d1c4a64772a0cd6e458c3c483fa41a4d60089a99e4d1a6a88a5d99d75d
-
SSDEEP
49152:P9/1PQ0vGNH6d0nznWRZ0xkAwJx6nASbqssG8I0l5L2ciOWMZ4E+b1:P9/VQ5H6exE5Z
Malware Config
Signatures
-
Enumerates kernel/hardware configuration 1 TTPs 1 IoCs
Reads contents of /sys virtual filesystem to enumerate system information.
description ioc Process File opened for reading /sys/kernel/mm/transparent_hugepage/hpage_pmd_size d_lin_arm -
Reads runtime system information 1 IoCs
Reads data from /proc virtual filesystem.
description ioc Process File opened for reading /proc/self/auxv d_lin_arm