Overview

overview

1

Static

static

1

ark-1.0.1/ark

ubuntu-18.04-amd64

ark-1.0.1/compile

ubuntu-18.04-amd64

1

ark-1.0.1/compile

debian-9-armhf

1

ark-1.0.1/compile

debian-9-mips

1

ark-1.0.1/compile

debian-9-mipsel

1

ark-1.0.1/du

ubuntu-18.04-amd64

ark-1.0.1/killall

ubuntu-18.04-amd64

ark-1.0.1/...normal

ubuntu-18.04-amd64

ark-1.0.1/...shadow

ubuntu-18.04-amd64

ark-1.0.1/ls

ubuntu-18.04-amd64

ark-1.0.1/netstat

ubuntu-18.04-amd64

ark-1.0.1/ps

ubuntu-18.04-amd64

ark-1.0.1/pstree

ubuntu-18.04-amd64

ark-1.0.1/sshd

ubuntu-18.04-amd64

ark-1.0.1/syslogd

ubuntu-18.04-amd64

ark-1.0.1/top

ubuntu-18.04-amd64

Analysis

  • max time kernel
    4s
  • max time network
    11s
  • platform
    ubuntu-18.04_amd64
  • resource
    ubuntu1804-amd64-20231215-en
  • resource tags

    arch:amd64arch:i386image:ubuntu1804-amd64-20231215-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system
  • submitted
    22-12-2023 15:36

Sharing

Copy URL
Twitter E-mail

Errors

Reason
platform exec: stat /lib/ld-linux.so.2: no such file or directory payload error: fork/exec /tmp/ark-1.0.1/login-shadow: no such file or directory
Report Analysis Logs

General

  • Target

    ark-1.0.1/login-shadow

  • Size

    42KB

  • MD5

    d9737ab370b7c045d1e98c45872708a9

  • SHA1

    a26f8fc9cd58f413f4d0a63fdd9e1f51a0e6556d

  • SHA256

    f8527cb253ad4124caff5d7c199536dafbb411815c92f1de584bb4555ec65e05

  • SHA512

    1ff1be0d448902735d21dce289b40358de192e440f40454cc87308cbc039583335b746c9fc148b895b5202091836e7d2341b6a3f7f68ab2a6743ab7e4a2dccbe

  • SSDEEP

    768:+tVkxkBc/HpEgpjU+a6qk+d1yiT4XS1a9u3rsta86PS/BG6qUNxdB8Rv3gvB8nEm:YWpvPqk+dyS1ab6PS/ByFNUgQE

Score
1/10

Malware Config

Signatures

Processes

  • /tmp/ark-1.0.1/login-shadow
    /tmp/ark-1.0.1/login-shadow
    1⤵
      PID:1515

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads