Analysis
-
max time kernel
5s -
max time network
131s -
platform
ubuntu-18.04_amd64 -
resource
ubuntu1804-amd64-20231215-en -
resource tags
-
submitted
22/12/2023, 10:47
General
-
Target
.new/auto
-
Size
321B
-
MD5
ca67eae5a1d96c9c3360081112ed3f3d
-
SHA1
7b1972c14b16bcb7894cf253a0a6f35d20955050
-
SHA256
f1f2050b111aaf87fc959de7e42bb4a128324a3b49e1725bb46ff1de3741287d
-
SHA512
2a71f12606fa889254af881389e3b6c8a908a0f8494881da23f13b3fabb984c783c06011eddd5a615f3f89f57a5ded545edf069bbfbf2b1b728c74137820616b
Malware Config
Signatures
-
Creates/modifies Cron job 1 TTPs 1 IoCs
Cron allows running tasks on a schedule, and is commonly used for malware persistence.
-
Writes file to tmp directory 3 IoCs
Malware often drops required files in the /tmp directory.
Processes
-
/tmp/.new/auto/tmp/.new/auto1⤵
- Writes file to tmp directory
-
/bin/catcat egg.dir2⤵
-
-
/usr/bin/crontabcrontab cron.d2⤵
- Creates/modifies Cron job
-
-
/usr/bin/crontabcrontab -l2⤵
-
-
/bin/grepgrep update2⤵
-
-
/bin/chmodchmod u+x update2⤵
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
43B
MD53b2f719a9d771d62c517883965eb90d6
SHA100e509807df00bcc3772bf0a3a9e98c14a118880
SHA25605b5195cfef76afa953096d430835832bcd0aebe0ae5ed4be68b82fb8f298f03
SHA51212675e9be8f2dcf95c9ace59372c4c513184d705c1c00c8000562e30a7106212f02a8556536eea8974262fd11e66703c86bf6c089a9ba0a1ca76e0c745f2eca2
-
Filesize
163B
MD5e5f31a377fe4ae80ba76906bde403613
SHA187c56b4be18a51a810f952055da4611efff125bb
SHA2562765ce8bfbee5f423933e028df5e3a38f1c0f15ff2fdba15368ccd3d93be3719
SHA512cd9e8f25f075b37d29df89e93d877c8e4bece84fe1b85abeb6fb1f1652a879617676bb15d22448fe3801331db82e930a00d83fd995ceea00322e1d300aa4cc9f
-
Filesize
223B
MD59e7eb17c4149f339ed4c927c9f44fe03
SHA139e54fdae2459a15ba776a585c5c2b74bc85f2e7
SHA256a577c6d860cbda6e663857a76a310247e7a4568c9cb4ceec620859b95e615589
SHA5125d31d33e566d269bc86d6b6f97abad4ff13153310828bfafaa9adaf4737dc26581d3bb4460b363e24c80115365f43343aec060ba7660a9812c7646f9ec7a654f