b00a2e5296e3e575d31a594ee816bd1d3d8a9da29cf07a2eee1d1689f456a8b2 | Triage

Analysis

max time kernel
3s
platform
debian-9_armhf
resource
debian9-armhf-20240221-en
resource tags

arch:armhfimage:debian9-armhf-20240221-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem
submitted
26-02-2024 06:46

Sharing

Report Analysis Logs

General

Target

sharepoint-D7/.git/hooks/commit-msg.sample
Size

896B
MD5

579a3c1e12a1e74a98169175fb913012
SHA1

ee1ed5aad98a435f2020b6de35c173b75d9affac
SHA256

1f74d5e9292979b573ebd59741d46cb93ff391acdd083d340b94370753d92437
SHA512

d6bb7fa747f4625adf1877f546565cbe812ca7dd4168f7e9068e6732555d8737eba549546cf5946649e3f38de82d173aaf9c160a4c9f9445655258b4c5f955eb

Score

3^/10

Malware Config

Signatures

Reads runtime system information 1 IoCs
Reads data from /proc virtual filesystem.

Processes:

sed

description ioc process

File opened for reading /proc/filesystems sed

/tmp/sharepoint-D7/.git/hooks/commit-msg.sample
/tmp/sharepoint-D7/.git/hooks/commit-msg.sample
1⤵
PID:647

/bin/grep
grep "^Signed-off-by: "
1⤵
PID:651

/usr/bin/sort
sort
1⤵
PID:652

/usr/bin/uniq
uniq -c
1⤵
PID:653

/bin/sed
sed -e "/^[ ]*1[ ]/d"
1⤵
- Reads runtime system information
PID:654

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...