Overview
overview
1Static
static
1zipbomb-20.../ratio
ubuntu-18.04-amd64
1zipbomb-20.../ratio
debian-9-armhf
1zipbomb-20.../ratio
debian-9-mips
1zipbomb-20.../ratio
debian-9-mipsel
1zipbomb-20...ipbomb
ubuntu-18.04-amd64
1zipbomb-20...ipbomb
debian-9-armhf
1zipbomb-20...ipbomb
debian-9-mips
1zipbomb-20...ipbomb
debian-9-mipsel
1Analysis
-
max time kernel
3s -
platform
debian-9_armhf -
resource
debian9-armhf-20240226-en -
resource tags
arch:armhfimage:debian9-armhf-20240226-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem -
submitted
29/03/2024, 01:00
Static task
static1
Behavioral task
behavioral1
Sample
zipbomb-20210121/ratio
Resource
ubuntu1804-amd64-20240226-en
Behavioral task
behavioral2
Sample
zipbomb-20210121/ratio
Resource
debian9-armhf-20240226-en
Behavioral task
behavioral3
Sample
zipbomb-20210121/ratio
Resource
debian9-mipsbe-20240226-en
Behavioral task
behavioral4
Sample
zipbomb-20210121/ratio
Resource
debian9-mipsel-20240226-en
Behavioral task
behavioral5
Sample
zipbomb-20210121/zipbomb
Resource
ubuntu1804-amd64-20240226-en
Behavioral task
behavioral6
Sample
zipbomb-20210121/zipbomb
Resource
debian9-armhf-20240226-en
Behavioral task
behavioral7
Sample
zipbomb-20210121/zipbomb
Resource
debian9-mipsbe-20240226-en
Behavioral task
behavioral8
Sample
zipbomb-20210121/zipbomb
Resource
debian9-mipsel-20240226-en
General
-
Target
zipbomb-20210121/zipbomb
-
Size
34KB
-
MD5
5a4c839be1a6e0a72395de3a0d4eeebc
-
SHA1
593e85312eb1f681ebdd8d88c9bd9ba93a4c418e
-
SHA256
e12ea83f8be28647b25085c30f696dc876ed225f41eb6ef24c6b2433177095c5
-
SHA512
5e7036fda9b65d3499480fe489479f7396e426360f3bbadd016729c484727136bbd85ce13a2f77882b1e081426701cfe4d094faea627bafc5733b984f52faecf
-
SSDEEP
768:s2EwFQbROaoQh9O8T75fMbqpGEWm6i2KYmWJ4F7Sws:s2TFcGDU75fMGysgmWKM
Malware Config
Signatures
Processes
-
/tmp/zipbomb-20210121/zipbomb/tmp/zipbomb-20210121/zipbomb1⤵PID:647
-
/usr/local/sbin/python3python3 /tmp/zipbomb-20210121/zipbomb1⤵PID:647
-
/usr/local/bin/python3python3 /tmp/zipbomb-20210121/zipbomb1⤵PID:647
-
/usr/sbin/python3python3 /tmp/zipbomb-20210121/zipbomb1⤵PID:647
-
/usr/bin/python3python3 /tmp/zipbomb-20210121/zipbomb1⤵PID:647