Overview
overview
3Static
static
3dosia.zip
windows7-x64
1dosia.zip
windows10-2004-x64
1d_lin_arm
debian-9-armhf
3d_lin_x64
ubuntu-18.04-amd64
3d_mac_arm64
macos-10.15-amd64
1d_mac_x64
macos-10.15-amd64
1d_win_arm64.exe
windows7-x64
d_win_arm64.exe
windows10-2004-x64
d_win_x64.exe
windows7-x64
1d_win_x64.exe
windows10-2004-x64
1Analysis
-
max time kernel
3s -
max time network
304s -
platform
ubuntu-18.04_amd64 -
resource
ubuntu1804-amd64-20230831-en -
resource tags
arch:amd64arch:i386image:ubuntu1804-amd64-20230831-enkernel:4.15.0-161-genericlocale:en-usos:ubuntu-18.04-amd64system -
submitted
24/09/2023, 23:40
Static task
static1
Behavioral task
behavioral1
Sample
dosia.zip
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
dosia.zip
Resource
win10v2004-20230915-en
Behavioral task
behavioral3
Sample
d_lin_arm
Resource
debian9-armhf-20230831-en
Behavioral task
behavioral4
Sample
d_lin_x64
Resource
ubuntu1804-amd64-20230831-en
Behavioral task
behavioral5
Sample
d_mac_arm64
Resource
macos-20230831-en
Behavioral task
behavioral6
Sample
d_mac_x64
Resource
macos-20230831-en
Behavioral task
behavioral7
Sample
d_win_arm64.exe
Resource
win7-20230831-en
Behavioral task
behavioral8
Sample
d_win_arm64.exe
Resource
win10v2004-20230915-en
Behavioral task
behavioral9
Sample
d_win_x64.exe
Resource
win7-20230831-en
Behavioral task
behavioral10
Sample
d_win_x64.exe
Resource
win10v2004-20230915-en
General
-
Target
d_lin_x64
-
Size
7.2MB
-
MD5
01e2ad9b3069b939594ceae2e4fe694b
-
SHA1
440ba07104116733b53ad9c5df4c9b9f8137e868
-
SHA256
c0ac657716977e61604b2912f0104bb2a83af36b5f50ec88ae528cf571c208d5
-
SHA512
3ba986ecd147359423868e678d5a84b734e6268bfe7fa6840d8258707f6a49385ebf3dab68ca9168d3a87b76ab92176c7dd427b60082e70843a1650b083f3d9e
-
SSDEEP
49152:6MLMA0jTxeqpGo2rb/TSvO90d7HjmAFd4A64nsfJnKVy1laUL6vtGqeuWG/6Yykk:AinaVAVe+dmcEiZ12
Malware Config
Signatures
-
Enumerates kernel/hardware configuration 1 TTPs 1 IoCs
Reads contents of /sys virtual filesystem to enumerate system information.
description ioc Process File opened for reading /sys/kernel/mm/transparent_hugepage/hpage_pmd_size d_lin_x64