Overview
overview
10Static
static
3builder.exe
windows7-x64
1builder.exe
windows10-1703-x64
1builder.exe
ubuntu-20.04-amd64
d_esxi.out
windows7-x64
3d_esxi.out
windows10-1703-x64
3d_esxi.out
ubuntu-20.04-amd64
1d_nas_arm.out
windows7-x64
3d_nas_arm.out
windows10-1703-x64
3d_nas_arm.out
ubuntu-20.04-amd64
d_nas_x86.out
windows7-x64
3d_nas_x86.out
windows10-1703-x64
3d_nas_x86.out
ubuntu-20.04-amd64
3d_win.exe
windows7-x64
6d_win.exe
windows10-1703-x64
3d_win.exe
ubuntu-20.04-amd64
e_esxi.out
windows7-x64
3e_esxi.out
windows10-1703-x64
3e_esxi.out
ubuntu-20.04-amd64
1e_nas_arm.out
windows7-x64
3e_nas_arm.out
windows10-1703-x64
3e_nas_arm.out
ubuntu-20.04-amd64
e_nas_x86.out
windows7-x64
3e_nas_x86.out
windows10-1703-x64
3e_nas_x86.out
ubuntu-20.04-amd64
3e_win.exe
windows7-x64
10e_win.exe
windows10-1703-x64
10e_win.exe
ubuntu-20.04-amd64
Resubmissions
21-02-2024 19:59
240221-yqmsbafb69 1027-02-2023 15:10
230227-sj843seb89 127-06-2021 20:55
210627-2nsmat5hex 10Analysis
-
max time kernel
0s -
max time network
133s -
platform
ubuntu-20.04_amd64 -
resource
ubuntu2004-amd64-20240221-en -
resource tags
arch:amd64arch:i386image:ubuntu2004-amd64-20240221-enkernel:5.4.0-169-genericlocale:en-usos:ubuntu-20.04-amd64system -
submitted
21-02-2024 19:59
Static task
static1
Behavioral task
behavioral1
Sample
builder.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
builder.exe
Resource
win10-20240221-en
Behavioral task
behavioral3
Sample
builder.exe
Resource
ubuntu2004-amd64-20240221-en
Behavioral task
behavioral4
Sample
d_esxi.out
Resource
win7-20240221-en
Behavioral task
behavioral5
Sample
d_esxi.out
Resource
win10-20240221-en
Behavioral task
behavioral6
Sample
d_esxi.out
Resource
ubuntu2004-amd64-20240221-en
Behavioral task
behavioral7
Sample
d_nas_arm.out
Resource
win7-20240221-en
Behavioral task
behavioral8
Sample
d_nas_arm.out
Resource
win10-20240221-en
Behavioral task
behavioral9
Sample
d_nas_arm.out
Resource
ubuntu2004-amd64-20240221-en
Behavioral task
behavioral10
Sample
d_nas_x86.out
Resource
win7-20240221-en
Behavioral task
behavioral11
Sample
d_nas_x86.out
Resource
win10-20240221-en
Behavioral task
behavioral12
Sample
d_nas_x86.out
Resource
ubuntu2004-amd64-20240221-en
Behavioral task
behavioral13
Sample
d_win.exe
Resource
win7-20240221-en
Behavioral task
behavioral14
Sample
d_win.exe
Resource
win10-20240214-en
Behavioral task
behavioral15
Sample
d_win.exe
Resource
ubuntu2004-amd64-20240221-en
Behavioral task
behavioral16
Sample
e_esxi.out
Resource
win7-20240221-en
Behavioral task
behavioral17
Sample
e_esxi.out
Resource
win10-20240221-en
Behavioral task
behavioral18
Sample
e_esxi.out
Resource
ubuntu2004-amd64-20240221-en
Behavioral task
behavioral19
Sample
e_nas_arm.out
Resource
win7-20240221-en
Behavioral task
behavioral20
Sample
e_nas_arm.out
Resource
win10-20240221-en
Behavioral task
behavioral21
Sample
e_nas_arm.out
Resource
ubuntu2004-amd64-20240221-en
Behavioral task
behavioral22
Sample
e_nas_x86.out
Resource
win7-20240221-en
Behavioral task
behavioral23
Sample
e_nas_x86.out
Resource
win10-20240221-en
Behavioral task
behavioral24
Sample
e_nas_x86.out
Resource
ubuntu2004-amd64-20240221-en
Behavioral task
behavioral25
Sample
e_win.exe
Resource
win7-20240221-en
Behavioral task
behavioral26
Sample
e_win.exe
Resource
win10-20240221-en
Behavioral task
behavioral27
Sample
e_win.exe
Resource
ubuntu2004-amd64-20240221-en
General
-
Target
e_nas_x86.out
-
Size
2.0MB
-
MD5
1453c8123be53bf4458b1a8e7e54ddbb
-
SHA1
a1064f1393e4d548c27f1a4b5fb1a5cf9f5267e7
-
SHA256
e505b24de50b14aed35cf40725dc0185cab06fed90269d445ec7a4b36de124b6
-
SHA512
2eeffbcf1b8161f3f61a5654213004212042ca95b87393052a54b0a28416ee82eef113891488cc272581d6c2a557b1283712f8658ad48c219823b204724bc150
-
SSDEEP
49152:Tx8AK8iCuL2j/WU1jMEYaCQ4esXSdq8J3:t87Rc5CQ4eXdqS
Malware Config
Signatures
-
Enumerates kernel/hardware configuration 1 TTPs 1 IoCs
Reads contents of /sys virtual filesystem to enumerate system information.
Processes:
e_nas_x86.outdescription ioc process File opened for reading /sys/kernel/mm/transparent_hugepage/hpage_pmd_size e_nas_x86.out