Overview

overview

10

Static

static

10

Challenge_...m.docx

windows7-x64

4

Challenge_...m.docx

windows10-2004-x64

1

Challenge_...1.docx

windows7-x64

4

Challenge_...1.docx

windows10-2004-x64

1

Challenge_...y.docx

windows7-x64

4

Challenge_...y.docx

windows10-2004-x64

1

Challenge_...1.docx

windows7-x64

4

Challenge_...1.docx

windows10-2004-x64

1

tools/numb...ing.py

ubuntu-18.04-amd64

1

tools/numb...ing.py

debian-9-armhf

1

tools/numb...ing.py

debian-9-mips

1

tools/numb...ing.py

debian-9-mipsel

1

decoder_add1.py

ubuntu-18.04-amd64

1

decoder_add1.py

debian-9-armhf

1

decoder_add1.py

debian-9-mips

1

decoder_add1.py

debian-9-mipsel

1

decoder_ah.py

ubuntu-18.04-amd64

1

decoder_ah.py

debian-9-armhf

1

decoder_ah.py

debian-9-mips

1

decoder_ah.py

debian-9-mipsel

1

decoder_chr.py

ubuntu-18.04-amd64

1

decoder_chr.py

debian-9-armhf

1

decoder_chr.py

debian-9-mips

1

decoder_chr.py

debian-9-mipsel

1

decoder_rol1.py

ubuntu-18.04-amd64

1

decoder_rol1.py

debian-9-armhf

1

decoder_rol1.py

debian-9-mips

1

decoder_rol1.py

debian-9-mipsel

1

decoder_xor1.py

ubuntu-18.04-amd64

1

decoder_xor1.py

debian-9-armhf

1

decoder_xor1.py

debian-9-mips

1

decoder_xor1.py

debian-9-mipsel

1

Analysis

  • max time kernel
    7s
  • max time network
    265s
  • platform
    debian-9_armhf
  • resource
    debian9-armhf-20230831-en
  • resource tags

    arch:armhfimage:debian9-armhf-20230831-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem
  • submitted
    17-10-2023 04:42

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    decoder_ah.py

  • Size

    1KB

  • MD5

    e99956971f7cfd746e8f04818b93db46

  • SHA1

    f457eab1ca20f71eb136db827a71e467d95c1664

  • SHA256

    8941b1e1baf50cf2064cc8387631887568075433fb6feb05f06b25fe433bab3e

  • SHA512

    20dd1c3adf7ed254101d14729a706e06df9189715b08bb1d1cf7688006072495db7f5c9e6e8c6620b4796ccdcf0ca5996f5ff4f9cc76f29e4cb2b92404678a9d

Score
1/10

Malware Config

Signatures

Processes

  • /tmp/decoder_ah.py
    /tmp/decoder_ah.py
    1⤵
      PID:379
    • /usr/local/sbin/python
      python /tmp/decoder_ah.py
      1⤵
        PID:379
      • /usr/local/bin/python
        python /tmp/decoder_ah.py
        1⤵
          PID:379
        • /usr/sbin/python
          python /tmp/decoder_ah.py
          1⤵
            PID:379
          • /usr/bin/python
            python /tmp/decoder_ah.py
            1⤵
              PID:379
            • /sbin/python
              python /tmp/decoder_ah.py
              1⤵
                PID:379
              • /bin/python
                python /tmp/decoder_ah.py
                1⤵
                  PID:379

                Network

                MITRE ATT&CK Matrix

                Replay Monitor

                Loading Replay Monitor...

                Downloads