Overview

overview

6

Static

static

1

.python/allb

ubuntu-18.04-amd64

1

.python/allb

debian-9-armhf

6

.python/allb

debian-9-mips

6

.python/allb

debian-9-mipsel

6

.python/c

ubuntu-18.04-amd64

1

.python/oracle

ubuntu-18.04-amd64

1

.python/oracle

debian-9-armhf

1

.python/oracle

debian-9-mips

1

.python/oracle

debian-9-mipsel

1

.python/postgres

ubuntu-18.04-amd64

1

.python/postgres

debian-9-armhf

1

.python/postgres

debian-9-mips

1

.python/postgres

debian-9-mipsel

1

.python/prg

ubuntu-18.04-amd64

1

.python/prg

debian-9-armhf

1

.python/prg

debian-9-mips

1

.python/prg

debian-9-mipsel

1

.python/pscan

ubuntu-18.04-amd64

1

.python/rand

ubuntu-18.04-amd64

1

.python/rand

debian-9-armhf

1

.python/rand

debian-9-mips

1

.python/rand

debian-9-mipsel

1

.python/test

ubuntu-18.04-amd64

1

.python/test

debian-9-armhf

1

.python/test

debian-9-mips

1

.python/test

debian-9-mipsel

1

.python/ubuntu

ubuntu-18.04-amd64

1

.python/ubuntu

debian-9-armhf

1

.python/ubuntu

debian-9-mips

1

.python/ubuntu

debian-9-mipsel

1

Analysis

  • max time kernel
    14s
  • max time network
    132s
  • platform
    ubuntu-18.04_amd64
  • resource
    ubuntu1804-amd64-20231215-en
  • resource tags

    arch:amd64arch:i386image:ubuntu1804-amd64-20231215-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system
  • submitted
    22-12-2023 02:41

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    .python/oracle

  • Size

    1KB

  • MD5

    479802ea13cf2831af66477aeaad217d

  • SHA1

    6177980a3088f4fec7dea668d3b94f12bca1564b

  • SHA256

    168bda8019db76538375bd67f432c3b91ab28485ddd60ec0f353343178b4a784

  • SHA512

    84e6155ac0e53c43064a1abf28c7219f1f8c0fac454dc9d00276f4f010d278cd7bef4585a65c8d0102951c062e1e7a5ccb9bad05940beeaec25815f122246cd0

Score
1/10

Malware Config

Signatures

Processes

  • /tmp/.python/oracle
    /tmp/.python/oracle
    1⤵
      PID:1535
      • /tmp/.python/c
        ./c 22 -b -i eth0 -s 10
        2⤵
          PID:1536
        • /bin/sleep
          sleep 2
          2⤵
            PID:1537
          • /tmp/.python/prg
            ./prg -I bios.txt -U ouser.txt -L opass.txt -o vuln.txt
            2⤵
              PID:1541
            • /bin/sleep
              sleep 5
              2⤵
                PID:1542
              • /bin/rm
                rm -rf "*.find.22" bios.txt
                2⤵
                  PID:1543
                • /bin/sleep
                  sleep 1
                  2⤵
                    PID:1544
                  • /bin/cat
                    cat vuln.txt
                    2⤵
                      PID:1545

                  Network

                  MITRE ATT&CK Matrix

                  Replay Monitor

                  Loading Replay Monitor...

                  Downloads