30b2a084ba4a2a9f042bb4ab91b84cd5eebd706b022d20c85d1f5b7a1baf0cad | Triage

Analysis

max time kernel
1s
platform
debian-9_mipsel
resource
debian9-mipsel-20231221-en
resource tags

arch:mipselimage:debian9-mipsel-20231221-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipselsystem
submitted
05-02-2024 16:14

Sharing

Report Analysis Logs

General

Target

webmail-RD4/.git/hooks/commit-msg.sample
Size

896B
MD5

579a3c1e12a1e74a98169175fb913012
SHA1

ee1ed5aad98a435f2020b6de35c173b75d9affac
SHA256

1f74d5e9292979b573ebd59741d46cb93ff391acdd083d340b94370753d92437
SHA512

d6bb7fa747f4625adf1877f546565cbe812ca7dd4168f7e9068e6732555d8737eba549546cf5946649e3f38de82d173aaf9c160a4c9f9445655258b4c5f955eb

Score

3^/10

Malware Config

Signatures

Reads runtime system information 1 IoCs
Reads data from /proc virtual filesystem.

Processes:

sed

description ioc process

File opened for reading /proc/filesystems sed

/tmp/webmail-RD4/.git/hooks/commit-msg.sample
/tmp/webmail-RD4/.git/hooks/commit-msg.sample
1⤵
PID:722

/bin/grep
grep "^Signed-off-by: "
1⤵
PID:726

/usr/bin/sort
sort
1⤵
PID:727

/bin/sed
sed -e "/^[ ]*1[ ]/d"
1⤵
- Reads runtime system information
PID:729

/usr/bin/uniq
uniq -c
1⤵
PID:728

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...