b089fcd4a23591b5b94198f4efeb166d81aea76e5a5785d5e0c5e5c885ad9c5f | Triage

Analysis

max time kernel
10s
platform
debian-9_mips
resource
debian9-mipsbe-20231215-en
resource tags

arch:mipsimage:debian9-mipsbe-20231215-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipssystem
submitted
21-12-2023 22:58

Sharing

Report Analysis Logs

General

Target

gosh/secure
Size

197B
MD5

39acbfc1e983e45308cdab2d3ec4bf34
SHA1

f8f712474d0c1e80126f8fc91e9ffd819f7d7f45
SHA256

b7bfce3e886608199e7dd31bcd4af0d84eaa90267e45273278e8826dfa993133
SHA512

e1f6782e1130deb6dd27e922e663136e0896747819c853750b237d2dd18e1951e4796c65bdc3bd4e77974afe8880a8309e495440abde920a5f9f6b40bc7512b6

Score

3^/10

Malware Config

Signatures

Reads runtime system information 1 IoCs

Reads data from /proc virtual filesystem.

description	ioc	Process
File opened for reading	/proc/filesystems	mv

/tmp/gosh/secure
/tmp/gosh/secure
1⤵
PID:710
- /usr/bin/whoami
  whoami
  2⤵
  PID:712
- /bin/chmod
  chmod -x /usr/bin/mail
  2⤵
  PID:718
- /bin/mv
  mv /usr/bin/mail /usr/bin/s8
  2⤵
  - Reads runtime system information
  PID:722

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads