Overview

overview

7

Static

static

1

bin/dir

ubuntu-18.04-amd64

bin/encrypt

ubuntu-18.04-amd64

bin/find

ubuntu-18.04-amd64

bin/hide

ubuntu-18.04-amd64

3

bin/hide

debian-9-armhf

3

bin/hide

debian-9-mips

3

bin/hide

debian-9-mipsel

1

bin/ifconfig

ubuntu-18.04-amd64

bin/ls

ubuntu-18.04-amd64

bin/lsof

ubuntu-18.04-amd64

bin/md5sum

ubuntu-18.04-amd64

bin/netstat

ubuntu-18.04-amd64

bin/ps

ubuntu-18.04-amd64

bin/pstree

ubuntu-18.04-amd64

bin/shp

ubuntu-18.04-amd64

1

bin/shp

debian-9-armhf

1

bin/shp

debian-9-mips

1

bin/shp

debian-9-mipsel

1

bin/shsb

ubuntu-18.04-amd64

1

bin/shsb

debian-9-armhf

1

bin/shsb

debian-9-mips

1

bin/shsb

debian-9-mipsel

1

bin/shsniff

ubuntu-18.04-amd64

bin/slocate

ubuntu-18.04-amd64

.sh/shhk.pub

windows7-x64

4

.sh/shhk.pub

windows10-2004-x64

3

.sh/sshd

ubuntu-18.04-amd64

7

bin/syslogd

ubuntu-18.04-amd64

bin/sz

ubuntu-18.04-amd64

1

bin/sz

debian-9-armhf

1

bin/sz

debian-9-mips

1

bin/sz

debian-9-mipsel

1

Analysis

  • max time kernel
    3s
  • max time network
    8s
  • platform
    ubuntu-18.04_amd64
  • resource
    ubuntu1804-amd64-20231215-en
  • resource tags

    arch:amd64arch:i386image:ubuntu1804-amd64-20231215-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system
  • submitted
    22/12/2023, 16:30

Sharing

Copy URL Twitter E-mail

Errors

Reason
platform exec: stat /lib/ld-linux.so.2: no such file or directory payload error: fork/exec /tmp/bin/ifconfig: no such file or directory
Report Analysis Logs

General

  • Target

    bin/ifconfig

  • Size

    30KB

  • MD5

    e4738d828b366ac21572e6a17f7ecba4

  • SHA1

    2b4f36485056ab6edde2521f8dda623dfe603e0d

  • SHA256

    89a400077d74d1d76103180f41f40de6bcfffc89de461f497eef2ea763a68d73

  • SHA512

    5ea540e5ca2ecfdc515ff9bc81a7679e6146468c8290903511b733e4f337df03ae6a48c73c15ed6a6c757b3356b2a25764481576612e3dbdf7fb241f5ca9fa57

  • SSDEEP

    768:RaqAVHiuJevkBG4PjVDmULhhjVDm/rPbSOz:RaFTJe8BG7AhhRerPmOz

Score
1/10

Malware Config

Signatures

Processes

  • /tmp/bin/ifconfig
    /tmp/bin/ifconfig
    1⤵
      PID:1527

    Network

          MITRE ATT&CK Matrix

          Replay Monitor

          Loading Replay Monitor...

          Downloads