Analysis
-
max time network
220s -
platform
debian-9_armhf -
resource
debian9-armhf-20240418-en -
resource tags
arch:armhfimage:debian9-armhf-20240418-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem -
submitted
08/05/2024, 07:48
Static task
static1
Behavioral task
behavioral1
Sample
setupArchLinux.sh
Resource
ubuntu1804-amd64-20240226-en
Behavioral task
behavioral2
Sample
setupArchLinux.sh
Resource
debian9-armhf-20240418-en
Behavioral task
behavioral3
Sample
setupArchLinux.sh
Resource
debian9-mipsbe-20240418-en
Behavioral task
behavioral4
Sample
setupArchLinux.sh
Resource
debian9-mipsel-20240226-en
General
-
Target
setupArchLinux.sh
-
Size
12KB
-
MD5
2e01a4a6250a677b59184cb7e27e9a11
-
SHA1
9b7ea7b98455780f963b1ab9ff4e17e1e8905515
-
SHA256
16f32d682f966a7551ad52544b338646175dd5111594dbbc9db04c4f4a38e20e
-
SHA512
0b43b54d75d995c6eb3c0dea217af45f52af536c5debb6e96be0c7ede209051a5c640ea69b5b5c405b51d6c6057060be46e1d3a6c1fd504d435220185fcfe7c7
-
SSDEEP
192:Xcx39RN1mn/9vflCjNpDAO+RzzQzwU0mHeZ726+1yC1oDfEpvnQ9+:sxI9vflCjHMOmczwUw726+1yWtZQ9+
Malware Config
Signatures
-
Legitimate hosting services abused for malware hosting/C2 1 TTPs 14 IoCs
flow ioc 25 raw.githubusercontent.com 340 raw.githubusercontent.com 363 raw.githubusercontent.com 23 raw.githubusercontent.com 28 raw.githubusercontent.com 364 raw.githubusercontent.com 24 raw.githubusercontent.com 14 raw.githubusercontent.com 30 raw.githubusercontent.com 13 raw.githubusercontent.com 27 raw.githubusercontent.com 29 raw.githubusercontent.com 343 raw.githubusercontent.com 26 raw.githubusercontent.com