ca1abc263018dd7ec1ef25ef7874167445bfa64d50a549b36624d3d679f597e4

Analysis

max time kernel
0s
max time network
129s
platform
ubuntu-18.04_amd64
resource
ubuntu1804-amd64-20240226-en
resource tags

arch:amd64arch:i386image:ubuntu1804-amd64-20240226-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system
submitted
05-05-2024 01:31

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

FRPFILE AIO v2.8.4/ref/mobileact1247
Size

406B
MD5

e081ef6ebf41b991575561ae9d9aded2
SHA1

203c9e335c9dde271fd5817043da1165e6b0113e
SHA256

ac551e69e727cbed0c273605c2b088021a4381ec8b8d902ec6ff42c0c2316999
SHA512

e3c9cf7b71ddc7c29ecd40a36fee0fa6a512d06416b7d8ff449e782cd797e2bedf1c756e972d3da992fcb661c77b83f8e0d298dee3b33da82933c44f39cefd44

Score

6^/10

Malware Config

Signatures

Enumerates running processes
Discovers information about currently running processes on the system

Reads runtime system information 64 IoCs

Reads data from /proc virtual filesystem.

Processes:

killallkillall

description	ioc	process
File opened for reading	/proc/1184/stat	killall
File opened for reading	/proc/10/stat	killall
File opened for reading	/proc/35/stat	killall
File opened for reading	/proc/950/cmdline	killall
File opened for reading	/proc/1151/stat	killall
File opened for reading	/proc/1186/stat	killall
File opened for reading	/proc/36/stat	killall
File opened for reading	/proc/646/stat	killall
File opened for reading	/proc/11/stat	killall
File opened for reading	/proc/1108/stat	killall
File opened for reading	/proc/1062/stat	killall
File opened for reading	/proc/1151/stat	killall
File opened for reading	/proc/22/stat	killall
File opened for reading	/proc/1184/stat	killall
File opened for reading	/proc/410/stat	killall
File opened for reading	/proc/465/stat	killall
File opened for reading	/proc/115/stat	killall
File opened for reading	/proc/28/stat	killall
File opened for reading	/proc/8/stat	killall
File opened for reading	/proc/1066/stat	killall
File opened for reading	/proc/162/stat	killall
File opened for reading	/proc/11/stat	killall
File opened for reading	/proc/14/stat	killall
File opened for reading	/proc/34/stat	killall
File opened for reading	/proc/491/stat	killall
File opened for reading	/proc/1191/stat	killall
File opened for reading	/proc/16/stat	killall
File opened for reading	/proc/667/stat	killall
File opened for reading	/proc/1151/cmdline	killall
File opened for reading	/proc/1162/stat	killall
File opened for reading	/proc/1344/stat	killall
File opened for reading	/proc/205/stat	killall
File opened for reading	/proc/486/stat	killall
File opened for reading	/proc/600/stat	killall
File opened for reading	/proc/698/stat	killall
File opened for reading	/proc/1007/stat	killall
File opened for reading	/proc/171/stat	killall
File opened for reading	/proc/1251/stat	killall
File opened for reading	/proc/1285/cmdline	killall
File opened for reading	/proc/31/stat	killall
File opened for reading	/proc/672/stat	killall
File opened for reading	/proc/1012/stat	killall
File opened for reading	/proc/1118/stat	killall
File opened for reading	/proc/1163/stat	killall
File opened for reading	/proc/315/stat	killall
File opened for reading	/proc/1093/stat	killall
File opened for reading	/proc/84/stat	killall
File opened for reading	/proc/filesystems	killall
File opened for reading	/proc/29/stat	killall
File opened for reading	/proc/903/stat	killall
File opened for reading	/proc/1251/cmdline	killall
File opened for reading	/proc/1287/stat	killall
File opened for reading	/proc/1134/cmdline	killall
File opened for reading	/proc/24/stat	killall
File opened for reading	/proc/15/stat	killall
File opened for reading	/proc/22/stat	killall
File opened for reading	/proc/456/stat	killall
File opened for reading	/proc/1188/stat	killall
File opened for reading	/proc/1530/cmdline	killall
File opened for reading	/proc/722/stat	killall
File opened for reading	/proc/1069/stat	killall
File opened for reading	/proc/15/cmdline	killall
File opened for reading	/proc/903/stat	killall
File opened for reading	/proc/24/stat	killall

/tmp/FRPFILE AIO v2.8.4/ref/mobileact1247
"/tmp/FRPFILE AIO v2.8.4/ref/mobileact1247"
1⤵
PID:1536

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads