03eb4180a04f0bfb85f357bcda3498b34856f0f798f9035c09b50816434c02f2

Analysis

max time kernel
1s
platform
debian-9_armhf
resource
debian9-armhf-20240226-en
resource tags

arch:armhfimage:debian9-armhf-20240226-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem
submitted
29-02-2024 02:08

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

yewaki/wgbground/.git/hooks/commit-msg.sample
Size

896B
MD5

579a3c1e12a1e74a98169175fb913012
SHA1

ee1ed5aad98a435f2020b6de35c173b75d9affac
SHA256

1f74d5e9292979b573ebd59741d46cb93ff391acdd083d340b94370753d92437
SHA512

d6bb7fa747f4625adf1877f546565cbe812ca7dd4168f7e9068e6732555d8737eba549546cf5946649e3f38de82d173aaf9c160a4c9f9445655258b4c5f955eb

Score

7^/10

Malware Config

Signatures

Deletes itself 1 IoCs

Processes:

pid

659
Reads runtime system information 1 IoCs
Reads data from /proc virtual filesystem.

Processes:

sed

description ioc process

File opened for reading /proc/filesystems sed

pid
659

description	ioc	process
File opened for reading	/proc/filesystems	sed

Writes file to tmp directory 32 IoCs

Malware often drops required files in the /tmp directory.

Processes:

description	ioc
File opened for modification	/tmp/yewaki/wgbground/images/weblogo.png
File opened for modification	/tmp/yewaki/wgbground/.git/logs/HEAD
File opened for modification	/tmp/yewaki/wgbground/.git/logs/refs/heads/master
File opened for modification	/tmp/yewaki/wgbground/.git/objects/b2/71b4e76652fe0bec2926bec7a435e4a6401493
File opened for modification	/tmp/yewaki/wgbground/.git/objects/ca/dcea0829fce695053f2d62460d3323b2af979e
File opened for modification	/tmp/yewaki/wgbground/.git/objects/e5/6e805b8b6580732062db95a24b51328b8605e3
File opened for modification	/tmp/yewaki/wgbground/.git/refs/heads/master
File opened for modification	/tmp/yewaki/wgbground/.git/objects/8b/eddcd6837f6aa5fc3ac8e373075b55e06a2851
File opened for modification	/tmp/yewaki/wgbground/.git/objects/c9/1f01b4bcdde5a383f6a1e04a136873d55ed6a0
File opened for modification	/tmp/yewaki/wgbground/email.php
File opened for modification	/tmp/yewaki/wgbground/.git/objects/8c/6ee9260e5651ddc7d4b57b4729efccb8296e62
File opened for modification	/tmp/yewaki/wgbground/.git/objects/e8/1c4b648b434cf872b9d38f321bc615239895f2
File opened for modification	/tmp/yewaki/wgbground/next.php
File opened for modification	/tmp/yewaki/wgbground/.git/objects/bf/f2d4c3995d7832746765cf4db2c47ffd4144cf
File opened for modification	/tmp/yewaki/wgbground/.git/objects/ea/a2e30349bb1d221ae88846e05361e83e610731
File opened for modification	/tmp/yewaki/wgbground/.git/objects/f4/c4ecaebb9f485305639fedb2dd79798b02ee67
File opened for modification	/tmp/yewaki/wgbground/css/landing.css
File opened for modification	/tmp/yewaki/wgbground/.git/hooks/update.sample
File opened for modification	/tmp/yewaki/wgbground/.git/objects/71/c9bd32ff6af42b3ae22483989c987d7be24d01
File opened for modification	/tmp/yewaki/wgbground/.git/objects/b1/9b3e40e09c5978aabc667d16d0da446a1fc56b
File opened for modification	/tmp/yewaki/wgbground/.git/objects/b1/bb09f0a33548c2d7e3e1e8e7c6ca196f635300
File opened for modification	/tmp/yewaki/wgbground/.git/objects/df/bf752427637c12f118fb8e18280056bd055a11
File opened for modification	/tmp/yewaki/wgbground/.git/logs/refs/remotes/origin/master
File opened for modification	/tmp/yewaki/wgbground/.git/objects/52/c0e52d06d1aa4dbfd2e6bbd2b4a639904ebabd
File opened for modification	/tmp/yewaki/wgbground/.git/objects/91/957ac2cb7218e579a3c84fe2f0c22a5c8b39e0
File opened for modification	/tmp/yewaki/wgbground/index.html
File opened for modification	/tmp/yewaki/wgbground/.git/index
File opened for modification	/tmp/yewaki/wgbground/.git/info/exclude
File opened for modification	/tmp/yewaki/wgbground/.git/objects/6d/b38b11285e38f67824d2f74fcffbcee0776b0a
File opened for modification	/tmp/yewaki/wgbground/.git/objects/01/0a7aa6795952faf2c581cb690c653e241f6778
File opened for modification	/tmp/yewaki/wgbground/.git/objects/d4/9fd7b88bcaea8c321f895b69340292a968bc54
File opened for modification	/tmp/yewaki/wgbground/.git/refs/remotes/origin/master

/tmp/yewaki/wgbground/.git/hooks/commit-msg.sample
/tmp/yewaki/wgbground/.git/hooks/commit-msg.sample
1⤵
PID:664

/bin/grep
grep "^Signed-off-by: "
1⤵
PID:667

/usr/bin/sort
sort
1⤵
PID:668

/usr/bin/uniq
uniq -c
1⤵
PID:669

/bin/sed
sed -e "/^[ ]*1[ ]/d"
1⤵
- Reads runtime system information
PID:670

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

/tmp/yewaki/wgbground/.git/hooks/update.sample
Filesize
3KB

MD5
517f14b9239689dff8bda3022ebd9004

SHA1
e729cd61b27c128951d139de8e7c63d1a3758dde

SHA256
751c037320024ec2ee2757f3ffae0b10ad2c946367684e7059d4dc97eac7e431

SHA512
759abd33e5d1dda9b3e3d3116c47b23f616320d70cd66d567b1c4eeefeb6d78571d83b67d825d9e23aac35f0a2e0745cfab1381ecf486e30076b08797699f2c4

Download Submit
/tmp/yewaki/wgbground/.git/index
Filesize
1KB

MD5
22ba0b7f2193f9b95e1f14621daf8454

SHA1
e6b7461183c42d92aba9c38ae44386caad61fa87

SHA256
1a3a95aa89312159106c05e9e2ca441ee0c8571a2a75d7fbb22bf706b07c492d

SHA512
2660aa550ab21ff67125aac2ef4c62758a6afa5ed561ae2a0f697f581bbcaee5d046cf0691362b7793a935d14a8863d4d63725c36e70a61e9376054756b18b43

Download Submit
/tmp/yewaki/wgbground/.git/info/exclude
Filesize
240B

MD5
036208b4a1ab4a235d75c181e685e5a3

SHA1
c879df015d97615050afa7b9641e3352a1e701ac

SHA256
6671fe83b7a07c8932ee89164d1f2793b2318058eb8b98dc5c06ee0a5a3b0ec1

SHA512
9828c6ecdf91bf117416e17f4ee9caee2e1e37b6fb00b9ff04035ace17a3089b9d0a25c6baa1046c0e1c62d3da88838e8fca74ea82973d6b975905fde58f3072

Download Submit
/tmp/yewaki/wgbground/.git/logs/HEAD
Filesize
163B

MD5
8a674ce0dfc4afbd6d352ae21481d11a

SHA1
da402e14b0168ec2475a120de7fb5eae3cb89f85

SHA256
afd9510d1c752f59a557718747a0173909fc8af42c358ba6df6f79fe79182ba8

SHA512
757bc389b8794979ffabfa379379f745b39c8af79332e2c2d74406054fb6ec0146ce33f973cee38d12bd5e724683f04e961a861ec912236dd6ce5ce3361beb6f

Download Submit
/tmp/yewaki/wgbground/.git/logs/refs/remotes/origin/master
Filesize
147B

MD5
d119af3d7fc7d74b2f6a29e8499a3d19

SHA1
b28442a03b29ce1a8dbb54a34a979698f44e4f9d

SHA256
98088419e0bf9abdb42171b92564b3d8ff03f1d65a6b3c4812944d5f562ffe54

SHA512
44107ebcebd9d2b3b5fbe26049f87cd2aa8656f69984e510fbffa76b08188b79160abb8190ac351ac7c7446e634d72abae69d5ee4a371816ebf1d51f2c678152

Download Submit
/tmp/yewaki/wgbground/.git/objects/01/0a7aa6795952faf2c581cb690c653e241f6778
Filesize
13KB

MD5
8273f78020b13130e90d92eb33625f97

SHA1
57736a94ebbafec0109a56336b063e97a8ed8d4f

SHA256
0551f16055d623d81a4d6896f783f59b521b1c63577fb21f12bec7af03d196bc

SHA512
3a975f8242ba58012c327c24bc23034a938cfb63d8a441b07667a397b27e675cb3424ebba40575abf0b6fbdb6c6c461b05f159408c7f6963e693f99c934c4dd9

Download Submit
/tmp/yewaki/wgbground/.git/objects/52/c0e52d06d1aa4dbfd2e6bbd2b4a639904ebabd
Filesize
39KB

MD5
9f11a769d29b2dfe3474353207f2eb3e

SHA1
d0cafa3dee4ff52e32038dea8a3fe7d7b1465898

SHA256
83457108f27a2b26fbf20f445124f4a83e6d1715841d0950c343a30c1de7338d

SHA512
6564a2e25d8de7590dd9752c058f6b28afa60e3e3f6be551a991d4c3fa322a2677c35decfba5c1597fbdb8c6389afe789161006e164e42e2349bcf841aa26d16

Download Submit
/tmp/yewaki/wgbground/.git/objects/6d/b38b11285e38f67824d2f74fcffbcee0776b0a
Filesize
151B

MD5
3f92d16fa2de0d40832be8453ff52cd3

SHA1
2b9c2307badce980da95bf7f07dba4918b145a07

SHA256
779bb111b9f33d5eacfadecf5dd7310431b53c38e20e66115d3b76e2cf4d1d67

SHA512
ae31afdd58a59dc8c2acf16db3ce88fa3daafcc913807c282c306d038ddf9cdc41e8adf88f6a8bdca751860292cf0aecf4874722b03a1315c09aa8151769be4d

Download Submit
/tmp/yewaki/wgbground/.git/objects/71/c9bd32ff6af42b3ae22483989c987d7be24d01
Filesize
1017B

MD5
f672892f676fd7718d10f7f910305707

SHA1
b27c20ec6ddfe9e23f3c20f4251804fca9dfc51f

SHA256
07208ca50f603dc57b37e1a96f56efdee79ca98528f85b2bddc49b169938e033

SHA512
703ba5f27498f2d56b3ff8c318c7eaf0545ac2b7b76f141126a901fb6fc7c40d37d3f8b1873d3f0f6a69817eaf2fb6ed21dd3b96b6b0961f2b4c16083cc6a87a

Download Submit
/tmp/yewaki/wgbground/.git/objects/8b/eddcd6837f6aa5fc3ac8e373075b55e06a2851
Filesize
275B

MD5
d6b11dd8d043a25ae1819c3b96155163

SHA1
9982c8803ae34ecc09879018da7ca6ac74d66998

SHA256
7536e8afeec3b233fc056ca93b6dd6c1a449ca7cfc3bb07f00cab2912a2d6141

SHA512
60fafb6c85600511d58debdcf3c6195947dae0d10708b8966d27786f959f601c552c03c500ed382bb9b62227280a499bfa2fcd5fd50da1858ce05145021daff3

Download Submit
/tmp/yewaki/wgbground/.git/objects/8c/6ee9260e5651ddc7d4b57b4729efccb8296e62
Filesize
90KB

MD5
cb2bbfce3717535780e8966fcf2d7115

SHA1
00cd6db910a11f3d0a9041ce63bf8a893083e2fb

SHA256
b109226af4d27d49ad59458fa5f5288733eac5cff3fa4c50b8f0e4bf92674ecb

SHA512
d7019aa2c78a88c491f937816dac8bbaf191850e0d34c61d4aca3baf3ac080f0c7712a346f3782d0f2c10a066594015b6aaee8e4ae7e4cb4f60fb7ecd84dd3c5

Download Submit
/tmp/yewaki/wgbground/.git/objects/91/957ac2cb7218e579a3c84fe2f0c22a5c8b39e0
Filesize
197B

MD5
015c891b4cd9f752d4df8b3491a05366

SHA1
7336f5c2b5fad07fe9e2354eb992cb81336e1fce

SHA256
2f6f947f76a01e550ecc31794ec1a40a6349ec5e4d9fb2597a1706eca9161adf

SHA512
08b453c77a44a7da7eb012cf01e10b8ebdd16970e3835a0625afa86ff20ebd77229b08c73189408f9a02848da01fadcfaad61af3aa3c0e4d0749925a8081ebaf

Download Submit
/tmp/yewaki/wgbground/.git/objects/b1/9b3e40e09c5978aabc667d16d0da446a1fc56b
Filesize
126B

MD5
84522d78a396e583da630db7179f858c

SHA1
7af5162436991032c5b0a360cdfaabb53951a920

SHA256
c1c725badc774ee9ed228e7a3b4a210da2beb5b2619943c7faf66a7f5ce69df6

SHA512
3b4984b03c79ec34cc725491c7f09a4fcc5f464a185046443a232926ce79f9c154618e75d1b6924d68300fbc02774a327e7921ff179a92b31421bda744bb2769

Download Submit
/tmp/yewaki/wgbground/.git/objects/b1/bb09f0a33548c2d7e3e1e8e7c6ca196f635300
Filesize
2KB

MD5
4525126b5d25a5dda31c071eaa0345c0

SHA1
989b35ec068b5367b9a0f758fa9d27e5cb4b8e12

SHA256
fc559c1d6b5d582cd6428a013ed62470cfbe3bd6632df9d167239eb8f78ecc11

SHA512
336fc459c10174a137935664232e01acf1abae9642865f441f5e122d0e8325a96cce34b8c3daece605fde6991ae9e2a712e5d57d829f0a5ffad7d042add88790

Download Submit
/tmp/yewaki/wgbground/.git/objects/b2/71b4e76652fe0bec2926bec7a435e4a6401493
Filesize
18KB

MD5
c32391a948d5673061ed756f1cedcaf8

SHA1
d78f24ef19f4c0146a04f359f985ac3543667f52

SHA256
c355f180996ef7812e0fd2cb59b5aa0a836cd932ba98d8c1f9c928df849178ee

SHA512
2474a594a5cfaec43facab2ea702163ec50d29c73c4d13e46422120f480b108b9ca6d667efffa32d6fdeecccbdf0fc1b9ebb59e85776084736088856ddae6d4b

Download Submit
/tmp/yewaki/wgbground/.git/objects/bf/f2d4c3995d7832746765cf4db2c47ffd4144cf
Filesize
11KB

MD5
117a788e4703ee49879c2876ac516b22

SHA1
815998ad2bb8321d4603fa00f7642fdbc566ed3a

SHA256
b1f298f048f6a7adfdeae69ae832251ad3ee5a68127a121357e954a2714dd413

SHA512
e588e171cb82ef3d4ba73514c62e3d37015c02f9928c94937072855d23ab23edd13cd523708b6703321640ef2c2671c4d571bcdf235ceeda2e02897e10786996

Download Submit
/tmp/yewaki/wgbground/.git/objects/c9/1f01b4bcdde5a383f6a1e04a136873d55ed6a0
Filesize
29KB

MD5
a5473f68c2ad9b0e242e07884e708cd8

SHA1
a95d4809ef3237c38528a380a4add442e4109fd2

SHA256
99d00c14c4a902589bf5275e13dc669e21fba2778a5a4bca694bc5c4a3f18566

SHA512
f844b0a37010097b7d24584f7f51b63205fc1190efe6570a4bedca500f06b0d9cf6d60c5ac6f1f496d8bebc5200a55c506ff11a7fff09272aa551541eb952ebb

Download Submit
/tmp/yewaki/wgbground/.git/objects/ca/dcea0829fce695053f2d62460d3323b2af979e
Filesize
56KB

MD5
c59fb7818a930c6507fa5d6837aad6d7

SHA1
8742dc8651e4c807d4da6d238674827f326df2d6

SHA256
7777a476823adeb7f95e70fa66ba81535817a562f5039163acfd6b8b73a677dc

SHA512
f1ddb46b6bfcc6eefb38c55e1955b920fb9ca8da9ab64d87165c875a3b53cc8117beb5a666656513a66cd2418915735c5caf513e0c28f4d4eed2a0ab0d54220e

Download Submit
/tmp/yewaki/wgbground/.git/objects/d4/9fd7b88bcaea8c321f895b69340292a968bc54
Filesize
31KB

MD5
943a54a5d63075876f6c2a21bfcb06a6

SHA1
d435a9bdcbc3e001bca341605a9507df8b4b8f70

SHA256
6a94aa56a7a60e421239661d42dd1885083ead4a3f155b0a485155ba89c8a32d

SHA512
9543875a78b507607bd7e538da4f7f39ffff911e567247d6658bdc85e4e59fa6b38ca77fdbb6a743c4c725c0e6419e0687e11574aa007fd429dc996ef89f2a3b

Download Submit
/tmp/yewaki/wgbground/.git/objects/df/bf752427637c12f118fb8e18280056bd055a11
Filesize
32KB

MD5
6d3c7654784e291cd4ae6573934bf4c4

SHA1
e2c6bc1db32308978f4f0d5dcb6fd44b54019a4b

SHA256
b7002a84a905032811028cbea0a5564847c385cba56546153da3cc2f07521ab4

SHA512
10960ab7e9024c59455c0a72143228df77417bcf4963aa46dd5c9cfb3683d298a4f8bc2a61e597dac9663aa340e70387ccb5b0aa1f678f03e9233a329431b535

Download Submit
/tmp/yewaki/wgbground/.git/objects/e5/6e805b8b6580732062db95a24b51328b8605e3
Filesize
2KB

MD5
d21e949592b6743e64c77526136f1c04

SHA1
6932cf6f5928d85af6cfdaa124e3c233a14640b2

SHA256
e3a19038af677270170041aa3820bbb4130a1c851d0ea54f7358ba3d9a20bce2

SHA512
6169f41f30c1c8fd6ebfd6d6b75b0b1d9bcf985ce163168015e557165923c0af56413f8a52fefb244865aadb1baf58e784c8a8ec9550794cf84e1de78fe3bd81

Download Submit
/tmp/yewaki/wgbground/.git/objects/e8/1c4b648b434cf872b9d38f321bc615239895f2
Filesize
26KB

MD5
f45f675526477e058c899fbea924d599

SHA1
ddefdadb6a0b0ee9178f5360008c55a73f67e0c9

SHA256
8d96c6476a0e5defa9f3daa4b24ddd95f44c31496bbe19a1052ac3fdac3f54cb

SHA512
b2b5747acff467b96e103470b9ce0ee3086c32c55f19b015f1970fc7528b80a8d90d3e478eb4d3a048b7bcaa70d35bd9f785fe0d5153f720557b2a90df2ba871

Download Submit
/tmp/yewaki/wgbground/.git/objects/ea/a2e30349bb1d221ae88846e05361e83e610731
Filesize
853B

MD5
6f1ff14acb0b94e9a0c4a5947fc77622

SHA1
929b0976e50f98582147bc2a348964e2a0395221

SHA256
070466e8fafcabac4947459a2d55b0d1aa747860a3ca3cc46beeeaf17d094880

SHA512
4b76eafde0fcd7c142921d8d57ec07cf6ed16d3f6fc8b8a254e21f3217b8d5265259f27fd42f2b3e0d90f186f72f56f4ecb5b5a18c1c7c8dac1163a370112603

Download Submit
/tmp/yewaki/wgbground/.git/objects/f4/c4ecaebb9f485305639fedb2dd79798b02ee67
Filesize
910B

MD5
7099fe1ce190d9dc43f96a809f79cdac

SHA1
5903b8bd5cfe1351099c0e54ccf9b9cb8929799e

SHA256
3b6ad1c9112ce30d6f2a94e141f82192b64fc3c18b7b28bb732d732ed119e57d

SHA512
ed392ef530491cfe7e8acb6289dbd03fa9f0d2d402a10d70b48e8c1362c643990505f0eda1f64ac08350d0dfba833f367dc618d0edfbdfa8e1dbd794a26099d0

Download Submit
/tmp/yewaki/wgbground/.git/refs/heads/master
Filesize
41B

MD5
19df13db256a8ded2cec42f4b2c78192

SHA1
b0901a871f29560d0e02ccafe748ee6ac1547b3b

SHA256
af1bbd66d2725f0b31a7be4d59e8dbcdc53f4cee81b0153a8b4c0e96dfdf6f57

SHA512
b1d0e715a5a60cc42a1308a8333992546c9758a2956914def4e275536d7712818aac7570573abaa55c1b3c97ec135bd834ecc08dbd26c1ed32e7c8bea2efa476

Download Submit
/tmp/yewaki/wgbground/css/landing.css
Filesize
1KB

MD5
673a72457fdc4e41205701caad05c205

SHA1
07a41bcc92bf10346761a1ec007b24301e61f22c

SHA256
bed9a5050ff03491e4f55741a3b3ec18429d79c8337ffb2fb4511da79b6a10ee

SHA512
962d9de8c45685536553f768f7ad43d0af10f034e762a5467dce182dbf3dca2b8707ebcdee949cb759ccf1e78214006b068dd0626886d8b3248a8ec0cdab2228

Download Submit
/tmp/yewaki/wgbground/email.php
Filesize
51B

MD5
0c413d8113864c6fe63fc2ce4cce2883

SHA1
bbfa4ad6f4671d51b6fb9d23a3fa8aa48af9af40

SHA256
5d1172ba93cef4fb401d1eb13f66580354ad8104d60e171e5775d5225ba6addb

SHA512
913202be55a693c09bd2b23eaa450a211fa3c6ac300d92bfbf2e43f601bbc995c657ed0e11857eb787cf0fa008e14ffded006a284deef97a7b5429c5533011dc

Download Submit
/tmp/yewaki/wgbground/images/weblogo.png
Filesize
7KB

MD5
40ae4f6568f8a76588ff3dcb4d5f43b4

SHA1
f3643c44611d47e477c2b718c2ff40a20182964c

SHA256
31ccb91ffa866d8e061ada54bc00a8ee5f098eb8014607eb92f25d3b8a9eab2f

SHA512
efcafb08674c2a767a11d06631d74f442e5eeb7daf2b34c4515f4d9c8d1e98ee328faf066ee44950a49ebc8906e9d8c99543fe0ebb53652b5f8270a9b9f03a57

Download Submit
/tmp/yewaki/wgbground/index.html
Filesize
8KB

MD5
b0b012a62c3925f9511cd5307da92ae9

SHA1
d992aeef8ccf90eaba48b92c79a917439380eb9a

SHA256
59b27112e45cd1af530876b266b2cdde53fa9ac07c3a458d5ec3b77a1a6e04dd

SHA512
5bf14c3cfc5581b73b4bc076bff0a1cc56008e894cb7b25a93688808fc4829d7dc747bd8310f23d03e7fc7989621c937165dadd61b8cfbd0bf454e9c0b00a646

Download Submit
/tmp/yewaki/wgbground/next.php
Filesize
1KB

MD5
c78b2a40e51155b29c8a5e48e762fc8e

SHA1
2f85889dddedf7e064843cc702175a70896829a1

SHA256
4a85035b555ec3eb9027e53046f8aba18be5d5a671a6f284a7009e7c8efeb9d3

SHA512
853a607b1948ce53fc0b647bef23826b65927e76d0e826852dbff608c440fd4239d74b87a189af86bcf856f380641ded8bc522260ae42d7bd89191c373990ab7

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads