Overview
overview
4Static
static
1.SIGN.RSA....sa.pub
windows7-x64
4.SIGN.RSA....sa.pub
windows10-2004-x64
3var/ossec/...ban.sh
ubuntu-18.04-amd64
1var/ossec/...ban.sh
debian-9-armhf
1var/ossec/...ban.sh
debian-9-mips
1var/ossec/...ban.sh
debian-9-mipsel
1var/ossec/...unt.sh
ubuntu-18.04-amd64
3var/ossec/...unt.sh
debian-9-armhf
1var/ossec/...unt.sh
debian-9-mips
1var/ossec/...unt.sh
debian-9-mipsel
1var/ossec/...rop.sh
ubuntu-18.04-amd64
3var/ossec/...rop.sh
debian-9-armhf
1var/ossec/...rop.sh
debian-9-mips
1var/ossec/...rop.sh
debian-9-mipsel
1var/ossec/...rop.sh
ubuntu-18.04-amd64
3var/ossec/...rop.sh
debian-9-armhf
1var/ossec/...rop.sh
debian-9-mips
1var/ossec/...rop.sh
debian-9-mipsel
3var/ossec/...eny.sh
ubuntu-18.04-amd64
3var/ossec/...eny.sh
debian-9-armhf
1var/ossec/...eny.sh
debian-9-mips
1var/ossec/...eny.sh
debian-9-mipsel
1var/ossec/...ock.sh
ubuntu-18.04-amd64
3var/ossec/...ock.sh
debian-9-armhf
3var/ossec/...ock.sh
debian-9-mips
3var/ossec/...ock.sh
debian-9-mipsel
3var/ossec/...pfw.sh
ubuntu-18.04-amd64
3var/ossec/...pfw.sh
debian-9-armhf
1var/ossec/...pfw.sh
debian-9-mips
3var/ossec/...pfw.sh
debian-9-mipsel
1var/ossec/...mac.sh
ubuntu-18.04-amd64
3var/ossec/...mac.sh
debian-9-armhf
1Analysis
-
max time kernel
1s -
max time network
157s -
platform
debian-9_armhf -
resource
debian9-armhf-20230831-en -
resource tags
arch:armhfimage:debian9-armhf-20230831-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem -
submitted
07/10/2023, 23:47
Static task
static1
windows7-x64
windows10-2004-x64
Behavioral task
behavioral3
Sample
var/ossec/active-response/bin/cloudflare-ban.sh
Resource
ubuntu1804-amd64-en-20211208
ubuntu-18.04-amd64
Behavioral task
behavioral4
Sample
var/ossec/active-response/bin/cloudflare-ban.sh
Resource
debian9-armhf-20230831-en
debian-9-armhf
Behavioral task
behavioral5
Sample
var/ossec/active-response/bin/cloudflare-ban.sh
Resource
debian9-mipsbe-20230831-en
debian-9-mips
Behavioral task
behavioral6
Sample
var/ossec/active-response/bin/cloudflare-ban.sh
Resource
debian9-mipsel-en-20211208
debian-9-mipsel
Behavioral task
behavioral7
Sample
var/ossec/active-response/bin/disable-account.sh
Resource
ubuntu1804-amd64-20230831-en
ubuntu-18.04-amd64
Behavioral task
behavioral8
Sample
var/ossec/active-response/bin/disable-account.sh
Resource
debian9-armhf-en-20211208
debian-9-armhf
Behavioral task
behavioral9
Sample
var/ossec/active-response/bin/disable-account.sh
Resource
debian9-mipsbe-en-20211208
debian-9-mips
Behavioral task
behavioral10
Sample
var/ossec/active-response/bin/disable-account.sh
Resource
debian9-mipsel-20230831-en
debian-9-mipsel
Behavioral task
behavioral11
Sample
var/ossec/active-response/bin/firewall-drop.sh
Resource
ubuntu1804-amd64-20230831-en
ubuntu-18.04-amd64
Behavioral task
behavioral12
Sample
var/ossec/active-response/bin/firewall-drop.sh
Resource
debian9-armhf-20230831-en
debian-9-armhf
Behavioral task
behavioral13
Sample
var/ossec/active-response/bin/firewall-drop.sh
Resource
debian9-mipsbe-20230831-en
debian-9-mips
Behavioral task
behavioral14
Sample
var/ossec/active-response/bin/firewall-drop.sh
Resource
debian9-mipsel-20230831-en
debian-9-mipsel
Behavioral task
behavioral15
Sample
var/ossec/active-response/bin/firewalld-drop.sh
Resource
ubuntu1804-amd64-20230831-en
ubuntu-18.04-amd64
Behavioral task
behavioral16
Sample
var/ossec/active-response/bin/firewalld-drop.sh
Resource
debian9-armhf-20230831-en
debian-9-armhf
Behavioral task
behavioral17
Sample
var/ossec/active-response/bin/firewalld-drop.sh
Resource
debian9-mipsbe-en-20211208
debian-9-mips
Behavioral task
behavioral18
Sample
var/ossec/active-response/bin/firewalld-drop.sh
Resource
debian9-mipsel-20230831-en
debian-9-mipsel
Behavioral task
behavioral19
Sample
var/ossec/active-response/bin/host-deny.sh
Resource
ubuntu1804-amd64-20230831-en
ubuntu-18.04-amd64
Behavioral task
behavioral20
Sample
var/ossec/active-response/bin/host-deny.sh
Resource
debian9-armhf-20230831-en
debian-9-armhf
Behavioral task
behavioral21
Sample
var/ossec/active-response/bin/host-deny.sh
Resource
debian9-mipsbe-20230831-en
debian-9-mips
Behavioral task
behavioral22
Sample
var/ossec/active-response/bin/host-deny.sh
Resource
debian9-mipsel-20230831-en
debian-9-mipsel
Behavioral task
behavioral23
Sample
var/ossec/active-response/bin/ip-customblock.sh
Resource
ubuntu1804-amd64-20230831-en
ubuntu-18.04-amd64
Behavioral task
behavioral24
Sample
var/ossec/active-response/bin/ip-customblock.sh
Resource
debian9-armhf-20230831-en
debian-9-armhf
Behavioral task
behavioral25
Sample
var/ossec/active-response/bin/ip-customblock.sh
Resource
debian9-mipsbe-en-20211208
debian-9-mips
Behavioral task
behavioral26
Sample
var/ossec/active-response/bin/ip-customblock.sh
Resource
debian9-mipsel-en-20211208
debian-9-mipsel
Behavioral task
behavioral27
Sample
var/ossec/active-response/bin/ipfw.sh
Resource
ubuntu1804-amd64-en-20211208
ubuntu-18.04-amd64
Behavioral task
behavioral28
Sample
var/ossec/active-response/bin/ipfw.sh
Resource
debian9-armhf-20230831-en
debian-9-armhf
Behavioral task
behavioral29
Sample
var/ossec/active-response/bin/ipfw.sh
Resource
debian9-mipsbe-20230831-en
debian-9-mips
Behavioral task
behavioral30
Sample
var/ossec/active-response/bin/ipfw.sh
Resource
debian9-mipsel-20230831-en
debian-9-mipsel
Behavioral task
behavioral31
Sample
var/ossec/active-response/bin/ipfw_mac.sh
Resource
ubuntu1804-amd64-en-20211208
ubuntu-18.04-amd64
Behavioral task
behavioral32
Sample
var/ossec/active-response/bin/ipfw_mac.sh
Resource
debian9-armhf-20230831-en
debian-9-armhf
General
-
Target
var/ossec/active-response/bin/ipfw.sh
-
Size
1KB
-
MD5
33ab5d196695ec8839f76ffaaa6f27be
-
SHA1
f538020f501953027c97d77c8cc09d7e9aafd091
-
SHA256
1ca8c12b62b03c3eaa2e2adc6cfe2398055180b17d382a801d220f35f01efa9a
-
SHA512
9f5687711d839c34d7d22a2479315e757c0d0ea0719ce895597e7d6ef06f9fb4fe7b98f8043fbef2f9ff25325036d6c6cbe36df3ca0585a3c743f0af63c2b5da