Analysis

  • max time kernel
    6s
  • platform
    debian-9_armhf
  • resource
    debian9-armhf-20231215-en
  • resource tags

    arch:armhfimage:debian9-armhf-20231215-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem
  • submitted
    22-12-2023 16:08

General

  • Target

    ICS_rooting/runit-linux.sh

  • Size

    1KB

  • MD5

    39151a4030eade1471fd5ab0dbf7f659

  • SHA1

    a2a2a579f3229669123621437d48c98dc8cd8f36

  • SHA256

    b99debf3e406bcb2140d2e3e6a9c5428b5bfae34679fd688b215faa96e947381

  • SHA512

    7666394a4171595ccc459dea1dd72d41170759618dd789c49cb3ae5ef08eff1fc0f9339a277c470cf085da643bbbfb4d8e33e9b2ce2bb1f562ba9ebe5dc0b72b

Score
1/10

Malware Config

Signatures

Processes

  • /tmp/ICS_rooting/runit-linux.sh
    /tmp/ICS_rooting/runit-linux.sh
    1⤵
      PID:683
      • /usr/bin/clear
        clear
        2⤵
          PID:688
        • /tmp/ICS_rooting/adb
          ./adb wait-for-device
          2⤵
            PID:691
          • /tmp/ICS_rooting/adb
            ./adb shell mkdir /data/local/tools
            2⤵
              PID:692
            • /tmp/ICS_rooting/adb
              ./adb push tools /data/local/tools
              2⤵
                PID:693
              • /tmp/ICS_rooting/adb
                ./adb shell chmod 0755 "/data/local/tools/*"
                2⤵
                  PID:695
                • /tmp/ICS_rooting/adb
                  ./adb pull /data/local/tools/mempodroid
                  2⤵
                    PID:696
                  • /usr/bin/clear
                    clear
                    2⤵
                      PID:697

                  Network

                  MITRE ATT&CK Matrix

                  Replay Monitor

                  Loading Replay Monitor...

                  Downloads