Overview

overview

10

Static

static

10

Challenge_...m.docx

windows7-x64

4

Challenge_...m.docx

windows10-2004-x64

1

Challenge_...1.docx

windows7-x64

4

Challenge_...1.docx

windows10-2004-x64

1

Challenge_...y.docx

windows7-x64

4

Challenge_...y.docx

windows10-2004-x64

1

Challenge_...1.docx

windows7-x64

4

Challenge_...1.docx

windows10-2004-x64

1

tools/numb...ing.py

ubuntu-18.04-amd64

1

tools/numb...ing.py

debian-9-armhf

1

tools/numb...ing.py

debian-9-mips

1

tools/numb...ing.py

debian-9-mipsel

1

oledump.py

ubuntu-18.04-amd64

1

oledump.py

debian-9-armhf

1

oledump.py

debian-9-mips

1

oledump.py

debian-9-mipsel

1

plugin_biff.py

ubuntu-18.04-amd64

1

plugin_biff.py

debian-9-armhf

1

plugin_biff.py

debian-9-mips

1

plugin_biff.py

debian-9-mipsel

1

plugin_clsid.py

ubuntu-18.04-amd64

1

plugin_clsid.py

debian-9-armhf

1

plugin_clsid.py

debian-9-mips

1

plugin_clsid.py

debian-9-mipsel

1

plugin_dridex.py

ubuntu-18.04-amd64

1

plugin_dridex.py

debian-9-armhf

1

plugin_dridex.py

debian-9-mips

1

plugin_dridex.py

debian-9-mipsel

1

plugin_hifo.py

ubuntu-18.04-amd64

1

plugin_hifo.py

debian-9-armhf

1

plugin_hifo.py

debian-9-mips

1

plugin_hifo.py

debian-9-mipsel

1

Analysis

  • max time kernel
    3s
  • platform
    debian-9_mips
  • resource
    debian9-mipsbe-20231222-en
  • resource tags

    arch:mipsimage:debian9-mipsbe-20231222-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipssystem
  • submitted
    17-02-2024 23:18

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    plugin_biff.py

  • Size

    139KB

  • MD5

    d74fe593741147c60e2a3f7685a3699a

  • SHA1

    9a71d64062338971655e45f06a1dff5a4d599811

  • SHA256

    2031e6a7001c44532cbda669fed36218ceafd2bcc9c2f1458caf21a6e7b08547

  • SHA512

    76e6d4c412192799ac877fc1d3f5adb3f5c074bbce1a0e99c1abd567a0961b6bad6fc123cc1ee08dfba62b7a72c923db5221e05bf9d1c27e2c05c52a73378b52

  • SSDEEP

    1536:/LTuVCzjRet7e1/cX9p9v3BevapX4Rb7bm82lYRQQ8EotT68PllHGLoqDX1qHsG2:/zu9yb7bazjG0qD4K5q6pJwA2K

Score
1/10

Malware Config

Signatures

Processes

  • /tmp/plugin_biff.py
    /tmp/plugin_biff.py
    1⤵
      PID:737
    • /usr/local/sbin/python
      python /tmp/plugin_biff.py
      1⤵
        PID:737
      • /usr/local/bin/python
        python /tmp/plugin_biff.py
        1⤵
          PID:737
        • /usr/sbin/python
          python /tmp/plugin_biff.py
          1⤵
            PID:737
          • /usr/bin/python
            python /tmp/plugin_biff.py
            1⤵
              PID:737

            Network

            MITRE ATT&CK Matrix

            Replay Monitor

            Loading Replay Monitor...

            Downloads