Overview
overview
10Static
static
10protobuf-2...or.vbs
windows7-x64
1protobuf-2...or.vbs
windows10-2004-x64
1protobuf-2...ts.vbs
windows7-x64
1protobuf-2...ts.vbs
windows10-2004-x64
1protobuf-2...or.bat
windows7-x64
1protobuf-2...or.bat
windows10-2004-x64
1protobuf-2...ate.py
ubuntu-18.04-amd64
1protobuf-2...ate.py
debian-9-armhf
1protobuf-2...ate.py
debian-9-mips
protobuf-2...ate.py
debian-9-mipsel
protobuf-2...rk.vbs
windows7-x64
1protobuf-2...rk.vbs
windows10-2004-x64
1protobuf-2...are.py
ubuntu-18.04-amd64
3protobuf-2...are.py
debian-9-armhf
1protobuf-2...are.py
debian-9-mips
protobuf-2...are.py
debian-9-mipsel
protobuf-2..._cc.py
ubuntu-18.04-amd64
1protobuf-2..._cc.py
debian-9-armhf
1protobuf-2..._cc.py
debian-9-mips
protobuf-2..._cc.py
debian-9-mipsel
protobuf-2...tos.py
ubuntu-18.04-amd64
1protobuf-2...tos.py
debian-9-armhf
1protobuf-2...tos.py
debian-9-mips
protobuf-2...tos.py
debian-9-mipsel
protobuf-2...y_c.py
ubuntu-18.04-amd64
1protobuf-2...y_c.py
debian-9-armhf
1protobuf-2...y_c.py
debian-9-mips
protobuf-2...y_c.py
debian-9-mipsel
protobuf-2...rapper
ubuntu-18.04-amd64
1protobuf-2...rapper
debian-9-armhf
1protobuf-2...rapper
debian-9-mips
protobuf-2...rapper
debian-9-mipsel
Analysis
- max time kernel
0s - max time network
129s - platform
ubuntu-18.04_amd64 - resource
ubuntu1804-amd64-20240226-en - resource tags
arch:amd64arch:i386image:ubuntu1804-amd64-20240226-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system - submitted
07/05/2024, 10:58
Static task
static1
Behavioral task
behavioral1
Sample
protobuf-26.1/.github/workflows/janitor.vbs
Resource
win7-20240221-en
windows7-x64
Behavioral task
behavioral2
Sample
protobuf-26.1/.github/workflows/janitor.vbs
Resource
win10v2004-20240426-en
windows10-2004-x64
Behavioral task
behavioral3
Sample
protobuf-26.1/CMakeLists.vbs
Resource
win7-20240221-en
windows7-x64
Behavioral task
behavioral4
Sample
protobuf-26.1/CMakeLists.vbs
Resource
win10v2004-20240419-en
windows10-2004-x64
Behavioral task
behavioral5
Sample
protobuf-26.1/appveyor.bat
Resource
win7-20240220-en
windows7-x64
Behavioral task
behavioral6
Sample
protobuf-26.1/appveyor.bat
Resource
win10v2004-20240419-en
windows10-2004-x64
Behavioral task
behavioral7
Sample
protobuf-26.1/bazel/amalgamate.py
Resource
ubuntu1804-amd64-20240418-en
ubuntu-18.04-amd64
Behavioral task
behavioral8
Sample
protobuf-26.1/bazel/amalgamate.py
Resource
debian9-armhf-20240418-en
debian-9-armhf
Behavioral task
behavioral9
Sample
protobuf-26.1/bazel/amalgamate.py
Resource
debian9-mipsbe-20240226-en
debian-9-mips
Behavioral task
behavioral10
Sample
protobuf-26.1/bazel/amalgamate.py
Resource
debian9-mipsel-20240418-en
debian-9-mipsel
Behavioral task
behavioral11
Sample
protobuf-26.1/benchmarks/benchmark.vbs
Resource
win7-20240221-en
windows7-x64
Behavioral task
behavioral12
Sample
protobuf-26.1/benchmarks/benchmark.vbs
Resource
win10v2004-20240226-en
windows10-2004-x64
Behavioral task
behavioral13
Sample
protobuf-26.1/benchmarks/compare.py
Resource
ubuntu1804-amd64-20240226-en
ubuntu-18.04-amd64
Behavioral task
behavioral14
Sample
protobuf-26.1/benchmarks/compare.py
Resource
debian9-armhf-20240226-en
debian-9-armhf
Behavioral task
behavioral15
Sample
protobuf-26.1/benchmarks/compare.py
Resource
debian9-mipsbe-20240418-en
debian-9-mips
Behavioral task
behavioral16
Sample
protobuf-26.1/benchmarks/compare.py
Resource
debian9-mipsel-20240226-en
debian-9-mipsel
Behavioral task
behavioral17
Sample
protobuf-26.1/benchmarks/gen_protobuf_binary_cc.py
Resource
ubuntu1804-amd64-20240418-en
ubuntu-18.04-amd64
Behavioral task
behavioral18
Sample
protobuf-26.1/benchmarks/gen_protobuf_binary_cc.py
Resource
debian9-armhf-20240418-en
debian-9-armhf
Behavioral task
behavioral19
Sample
protobuf-26.1/benchmarks/gen_protobuf_binary_cc.py
Resource
debian9-mipsbe-20240226-en
debian-9-mips
Behavioral task
behavioral20
Sample
protobuf-26.1/benchmarks/gen_protobuf_binary_cc.py
Resource
debian9-mipsel-20240226-en
debian-9-mipsel
Behavioral task
behavioral21
Sample
protobuf-26.1/benchmarks/gen_synthetic_protos.py
Resource
ubuntu1804-amd64-20240418-en
ubuntu-18.04-amd64
Behavioral task
behavioral22
Sample
protobuf-26.1/benchmarks/gen_synthetic_protos.py
Resource
debian9-armhf-20240226-en
debian-9-armhf
Behavioral task
behavioral23
Sample
protobuf-26.1/benchmarks/gen_synthetic_protos.py
Resource
debian9-mipsbe-20240226-en
debian-9-mips
Behavioral task
behavioral24
Sample
protobuf-26.1/benchmarks/gen_synthetic_protos.py
Resource
debian9-mipsel-20240418-en
debian-9-mipsel
Behavioral task
behavioral25
Sample
protobuf-26.1/benchmarks/gen_upb_binary_c.py
Resource
ubuntu1804-amd64-20240226-en
ubuntu-18.04-amd64
Behavioral task
behavioral26
Sample
protobuf-26.1/benchmarks/gen_upb_binary_c.py
Resource
debian9-armhf-20240418-en
debian-9-armhf
Behavioral task
behavioral27
Sample
protobuf-26.1/benchmarks/gen_upb_binary_c.py
Resource
debian9-mipsbe-20240226-en
debian-9-mips
Behavioral task
behavioral28
Sample
protobuf-26.1/benchmarks/gen_upb_binary_c.py
Resource
debian9-mipsel-20240418-en
debian-9-mipsel
Behavioral task
behavioral29
Sample
protobuf-26.1/ci/clang_wrapper
Resource
ubuntu1804-amd64-20240226-en
ubuntu-18.04-amd64
Behavioral task
behavioral30
Sample
protobuf-26.1/ci/clang_wrapper
Resource
debian9-armhf-20240226-en
debian-9-armhf
Behavioral task
behavioral31
Sample
protobuf-26.1/ci/clang_wrapper
Resource
debian9-mipsbe-20240418-en
debian-9-mips
Behavioral task
behavioral32
Sample
protobuf-26.1/ci/clang_wrapper
Resource
debian9-mipsel-20240226-en
debian-9-mipsel
General
- Target protobuf-26.1/benchmarks/compare.py
- Size 4KB
- Sample240507-m27fbaff88
- SHA256 fcf6edb3d53c576e58d2aef0e62148b9789c2669d7920cb033f57675b10987c8
- MD5 c75761aaf1a791ebda1cd8119715a682
- SHA1 0f0fcffbf0c6e43085f24c768b31d29c5c4c6ea6
- SHA512 692a8aac762322e4d4af7989b86979805d85755d07b7c77eb6b628259d828f9a024acd0e627bce7b102995cf99899665129edfeb34069e56bc0a4c6aa0ff521f
- SSDEEP 96:TG1rYJfirYJ8nDE3oq3aBMTl5+lcR2SY0+OM+yuL6+fTWG811k8DTOpMXojRjLL+:y1rsfirsGDE3L3qmlcCR2SD/yYPfTWG8
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Signatures
- Reads runtime system information 1 IoCs
Reads data from /proc virtual filesystem.
description ioc Process File opened for reading /proc/self/fd compare.py
Processes
-
/tmp/protobuf-26.1/benchmarks/compare.py/tmp/protobuf-26.1/benchmarks/compare.py1⤵
- Reads runtime system information
PID:1550 -
/bin/sh/bin/sh -c "rm -rf /tmp/bench-output.json"2⤵PID:1551
-
/bin/rmrm -rf /tmp/bench-output.json3⤵PID:1552
-
-
-
/bin/sh/bin/sh -c "CC=clang bazel build -c opt --copt=-march=native benchmarks:benchmark"2⤵PID:1553
-