Overview
overview
10Static
static
7.rsync/a/a
ubuntu-20.04-amd64
10.rsync/a/init0
ubuntu-20.04-amd64
6.rsync/a/kswapd0
ubuntu-20.04-amd64
10.rsync/a/run
ubuntu-20.04-amd64
3.rsync/a/stop
ubuntu-20.04-amd64
10.rsync/b/a
ubuntu-20.04-amd64
7.rsync/b/run
ubuntu-20.04-amd64
7.rsync/b/stop
ubuntu-20.04-amd64
6.rsync/c/blitz
ubuntu-20.04-amd64
1.rsync/c/blitz32
ubuntu-20.04-amd64
3.rsync/c/blitz64
ubuntu-20.04-amd64
3.rsync/c/go
ubuntu-20.04-amd64
3.rsync/c/run
ubuntu-20.04-amd64
6.rsync/c/start
ubuntu-20.04-amd64
9.rsync/c/stop
ubuntu-20.04-amd64
6Analysis
-
max time kernel
1s -
max time network
481s -
platform
ubuntu-20.04_amd64 -
resource
ubuntu2004-amd64-20240221-en -
resource tags
arch:amd64arch:i386image:ubuntu2004-amd64-20240221-enkernel:5.4.0-169-genericlocale:en-usos:ubuntu-20.04-amd64system -
submitted
15/04/2024, 16:01
Behavioral task
behavioral1
Sample
.rsync/a/a
Resource
ubuntu2004-amd64-20240221-en
Behavioral task
behavioral2
Sample
.rsync/a/init0
Resource
ubuntu2004-amd64-20240221-en
Behavioral task
behavioral3
Sample
.rsync/a/kswapd0
Resource
ubuntu2004-amd64-20240221-en
Behavioral task
behavioral4
Sample
.rsync/a/run
Resource
ubuntu2004-amd64-20240221-en
Behavioral task
behavioral5
Sample
.rsync/a/stop
Resource
ubuntu2004-amd64-20240221-en
Behavioral task
behavioral6
Sample
.rsync/b/a
Resource
ubuntu2004-amd64-20240221-en
Behavioral task
behavioral7
Sample
.rsync/b/run
Resource
ubuntu2004-amd64-20240221-en
Behavioral task
behavioral8
Sample
.rsync/b/stop
Resource
ubuntu2004-amd64-20240221-en
Behavioral task
behavioral9
Sample
.rsync/c/blitz
Resource
ubuntu2004-amd64-20240221-en
Behavioral task
behavioral10
Sample
.rsync/c/blitz32
Resource
ubuntu2004-amd64-20240221-en
Behavioral task
behavioral11
Sample
.rsync/c/blitz64
Resource
ubuntu2004-amd64-20240221-en
Behavioral task
behavioral12
Sample
.rsync/c/go
Resource
ubuntu2004-amd64-20240221-en
Behavioral task
behavioral13
Sample
.rsync/c/run
Resource
ubuntu2004-amd64-20240221-en
Behavioral task
behavioral14
Sample
.rsync/c/start
Resource
ubuntu2004-amd64-20240221-en
Behavioral task
behavioral15
Sample
.rsync/c/stop
Resource
ubuntu2004-amd64-20240221-en
General
-
Target
.rsync/c/blitz32
-
Size
1.0MB
-
MD5
cda7b610c83e09f125599f661d4685bc
-
SHA1
84f1120a6ff3fa6aa5f0d343d34036db16fa31fb
-
SHA256
959ede1405a513855ec423b8f7953ea23a750e8b761d2b97eab0f295ed5787e7
-
SHA512
0fb8cc53222b7deba72677f411d1b6b04f919d8cc938ddac334be412a3a238e41edd0070f597a4b87bb821a0de23801f782a12e1e32c959cbd626fbab9102021
-
SSDEEP
24576:4FExXyWva34P9DDQFHwMwjxQejfECV9rlHojo/MKapXdnlf:4FAnSI9QFixD7N9rlHOo/MZflf
Malware Config
Signatures
-
Reads runtime system information 1 IoCs
Reads data from /proc virtual filesystem.
description ioc Process File opened for reading /proc/self/exe blitz32