Overview

overview

7

Static

static

7

xsd/PRIVATE/L

ubuntu-18.04-amd64

1

xsd/PRIVATE/L

debian-9-armhf

1

xsd/PRIVATE/L

debian-9-mips

1

xsd/PRIVATE/L

debian-9-mipsel

1

xsd/PRIVATE/x

ubuntu-18.04-amd64

1

xsd/PRIVATE/x

debian-9-armhf

1

xsd/PRIVATE/x

debian-9-mips

1

xsd/PRIVATE/x

debian-9-mipsel

1

xsd/goa

ubuntu-18.04-amd64

3

xsd/goa

debian-9-armhf

3

xsd/goa

debian-9-mips

3

xsd/goa

debian-9-mipsel

3

xsd/rand

ubuntu-18.04-amd64

1

xsd/rand

debian-9-armhf

1

xsd/rand

debian-9-mips

1

xsd/rand

debian-9-mipsel

1

xsd/ss

ubuntu-18.04-amd64

1

xsd/x

ubuntu-18.04-amd64

3

xsd/x

debian-9-armhf

1

xsd/x

debian-9-mips

1

xsd/x

debian-9-mipsel

3

xsd/zmeu

ubuntu-18.04-amd64

1

Analysis

  • max time kernel
    2s
  • platform
    debian-9_mipsel
  • resource
    debian9-mipsel-20231215-en
  • resource tags

    arch:mipselimage:debian9-mipsel-20231215-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipselsystem
  • submitted
    22-12-2023 13:07

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    xsd/x

  • Size

    467B

  • MD5

    d2f60757dc7ce3aa7a44fa71bb9f595f

  • SHA1

    f202ece9e377287744197a56ab13e661ac1b18b3

  • SHA256

    fb9cbaede6f6278e9c5bd075982a80c7b3a9b4976600e583b57c25ed3d3392d0

  • SHA512

    e50308afe713c388cb7bdc897e185d766a6c448cc31a43f0f8cdddde773043532b56139ed1104a51478c85d4be7da3c713e711d47838fbaf06e7f28d7fb61f8e

Score
3/10

Malware Config

Signatures

  • Writes file to tmp directory 1 IoCs

    Malware often drops required files in the /tmp directory.

Processes

  • /tmp/xsd/x
    /tmp/xsd/x
    1⤵
      PID:718
      • /bin/cat
        cat vuln.txt
        2⤵
          PID:721
        • /bin/cat
          cat vuln.txt
          2⤵
            PID:723

        Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads