Analysis

  • max time kernel
    5s
  • platform
    debian-9_armhf
  • resource
    debian9-armhf-20231215-en
  • resource tags

    arch:armhfimage:debian9-armhf-20231215-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem
  • submitted
    17/02/2024, 23:18

General

  • Target
    plugin_biff.py
  • Size 139KB
  • Sample240217-3almjacb64
  • SHA256 2031e6a7001c44532cbda669fed36218ceafd2bcc9c2f1458caf21a6e7b08547
  • MD5 SHA1 SHA512 SSDEEP
Score
1/10

Malware Config

Signatures

Processes

  • /tmp/plugin_biff.py
    /tmp/plugin_biff.py
    1⤵
      PID:664
    • /usr/local/sbin/python
      python /tmp/plugin_biff.py
      1⤵
        PID:664
      • /usr/local/bin/python
        python /tmp/plugin_biff.py
        1⤵
          PID:664
        • /usr/sbin/python
          python /tmp/plugin_biff.py
          1⤵
            PID:664
          • /usr/bin/python
            python /tmp/plugin_biff.py
            1⤵
              PID:664

            Network

                  MITRE ATT&CK Matrix

                  Replay Monitor

                  Loading Replay Monitor...

                  Downloads