Overview

overview

7

Static

static

1

getroot/full-nelson

ubuntu-18.04-amd64

getroot/go.sh

windows7-x64

3

getroot/go.sh

windows10-2004-x64

3

getroot/ho...endmsg

ubuntu-18.04-amd64

getroot/ip...d_data

ubuntu-18.04-amd64

getroot/k-rad3

ubuntu-18.04-amd64

1

getroot/linux-gate

ubuntu-18.04-amd64

getroot/mc...filter

ubuntu-18.04-amd64

getroot/pr...redump

ubuntu-18.04-amd64

getroot/prctlpute

ubuntu-18.04-amd64

getroot/pt...keuser

ubuntu-18.04-amd64

7

getroot/rds-privesc

ubuntu-18.04-amd64

getroot/udev-141

ubuntu-18.04-amd64

getroot/vmsplice

ubuntu-18.04-amd64

getroot/vmsplice2

ubuntu-18.04-amd64

1

getroot/vmsplice3

ubuntu-18.04-amd64

Analysis

  • max time kernel
    4s
  • max time network
    131s
  • platform
    ubuntu-18.04_amd64
  • resource
    ubuntu1804-amd64-20231215-en
  • resource tags

    arch:amd64arch:i386image:ubuntu1804-amd64-20231215-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system
  • submitted
    22-12-2023 12:26

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    getroot/ptrace_pokeuser

  • Size

    9KB

  • MD5

    898dde6afb3142e607528359b0935e9e

  • SHA1

    237fc44013a1975c4da3eda5a3dee150b6d21b3b

  • SHA256

    5e440444f93a5ab3f5b945e8bc57b7ee9713b0617d67862014e6616b4dbb0a75

  • SHA512

    08badd3a4f7536df24a46d589aa1ee9dabd114da8f42013d1db72517d282d0de89199fd83cfb471a98bda947b484c52fe582240993b1995ae146cde61e9e5707

  • SSDEEP

    192:GXH+juafdgFsjLdvkscNvT1sZlLXWPSWenBx:sQfdfjhcscNNPS5

Score
7/10

Malware Config

Signatures

  • Traces itself 1 IoCs

    Traces itself to prevent debugging attempts

Processes

  • /tmp/getroot/ptrace_pokeuser
    /tmp/getroot/ptrace_pokeuser
    1⤵
      PID:1530
      • /tmp/getroot/ptrace_pokeuser
        /tmp/getroot/ptrace_pokeuser 2 3 4
        2⤵
          PID:1531

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads