Overview

overview

7

Static

static

1

gosh/3.vbs

windows7-x64

1

gosh/3.vbs

windows10-2004-x64

1

gosh/gen-pass.h

ubuntu-18.04-amd64

7

gosh/gen-pass.h

debian-9-armhf

7

gosh/gen-pass.h

debian-9-mips

7

gosh/gen-pass.h

debian-9-mipsel

7

gosh/gen-pass.sh

ubuntu-18.04-amd64

1

gosh/gen-pass.sh

debian-9-armhf

1

gosh/gen-pass.sh

debian-9-mips

1

gosh/gen-pass.sh

debian-9-mipsel

1

gosh/go.sh

windows7-x64

3

gosh/go.sh

windows10-2004-x64

3

gosh/pscan2

ubuntu-18.04-amd64

gosh/scam

ubuntu-18.04-amd64

6

gosh/scam

debian-9-armhf

6

gosh/scam

debian-9-mips

6

gosh/scam

debian-9-mipsel

1

gosh/secure

ubuntu-18.04-amd64

3

gosh/secure

debian-9-armhf

3

gosh/secure

debian-9-mips

3

gosh/secure

debian-9-mipsel

3

gosh/ss

ubuntu-18.04-amd64

1

gosh/ssh-scan

ubuntu-18.04-amd64

1

Analysis

  • max time kernel
    153s
  • max time network
    157s
  • platform
    debian-9_mips
  • resource
    debian9-mipsbe-20231215-en
  • resource tags

    arch:mipsimage:debian9-mipsbe-20231215-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipssystem
  • submitted
    21-12-2023 22:58

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    gosh/gen-pass.h

  • Size

    14KB

  • MD5

    2af8736a176fe45f921519d637a636ad

  • SHA1

    98deb3be2d29f6df2a0dbe61e62f3faabb31a541

  • SHA256

    0a059b23b89a52d9f9e24e35251f68e72e2345d1b1d3e24814311bc0d6b75a1a

  • SHA512

    698f82065e99986865be7af088c901d55ae3836e9e9ca7349483803782122f03234eff8874beab5359b40720410d50d765246a434c010fc8180e86e36b6b283b

  • SSDEEP

    384:+si6F2+TAenEAlt6tWHbpwf5bUD2yt3YanX:+si62+TlKo7dl39X

Score
7/10

Malware Config

Signatures

  • Changes its process name 1 IoCs

Processes

  • /tmp/gosh/gen-pass.h
    /tmp/gosh/gen-pass.h
    1⤵
    • Changes its process name
    PID:707

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads