Overview

overview

7

Static

static

7

aria2_down...nux.sh

ubuntu-18.04-amd64

1

aria2_down...nux.sh

debian-9-armhf

1

aria2_down...nux.sh

debian-9-mips

aria2_down...nux.sh

debian-9-mipsel

aria2_down...ws.cmd

windows7-x64

1

aria2_down...ws.cmd

windows10-2004-x64

1

files/7zr.exe

windows7-x64

1

files/7zr.exe

windows10-2004-x64

1

files/aria2c.exe

windows7-x64

1

files/aria2c.exe

windows10-2004-x64

1

files/convert.sh

ubuntu-18.04-amd64

1

files/convert.sh

debian-9-armhf

1

files/convert.sh

debian-9-mips

files/convert.sh

debian-9-mipsel

files/conv...plugin

ubuntu-18.04-amd64

1

files/conv...plugin

debian-9-armhf

1

files/conv...plugin

debian-9-mips

files/conv...plugin

debian-9-mipsel

ReadMe.html

windows7-x64

1

ReadMe.html

windows10-2004-x64

1

bin/7z.dll

windows7-x64

3

bin/7z.dll

windows10-2004-x64

3

bin/7z.exe

windows7-x64

1

bin/7z.exe

windows10-2004-x64

1

bin/Updates.bat

windows7-x64

1

bin/Updates.bat

windows10-2004-x64

1

bin/bcdedit.exe

windows10-2004-x64

1

bin/bfi.exe

windows7-x64

7

bin/bfi.exe

windows10-2004-x64

7

bin/bin64/...15.dll

windows7-x64

1

bin/bin64/...15.dll

windows10-2004-x64

1

bin/bin64/...ex.exe

windows7-x64

1

Analysis

  • max time kernel
    0s
  • max time network
    128s
  • platform
    ubuntu-18.04_amd64
  • resource
    ubuntu1804-amd64-20240508-en
  • resource tags

    arch:amd64arch:i386image:ubuntu1804-amd64-20240508-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system
  • submitted
    20/05/2024, 17:51

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    files/convert.sh

  • Size

    14KB

  • MD5

    73291f3cdc20ee9180e3cb49d645414f

  • SHA1

    029205f9ea67bed8ef4f96dc7bc5af33458bcc33

  • SHA256

    ffbdeda273332907dfeef1e68ed7f17afc493b7b40cc4687c766a3deab5305b9

  • SHA512

    02580c23a2d48e5b35943bcdfba80d7a4116d0bc3d92b9447433caf3834bc0d54cbbe84a39a9cd3c2822b3096871fa8d5e88092d3ba8198203be5294460c9d02

  • SSDEEP

    192:2GfC8QeDnHfwlGlI3vaSPt2JQB+zcDz8WjlviqNWGOwOMWfJSKE:2GfTQPlGl22mBY1GJdb2q

Score
1/10

Malware Config

Signatures

Processes

  • /tmp/files/convert.sh
    /tmp/files/convert.sh
    1⤵
      PID:1501
      • /usr/bin/dirname
        dirname /tmp/files/convert.sh
        2⤵
          PID:1502
        • /usr/bin/dirname
          dirname /tmp/files/convert.sh
          2⤵
            PID:1503
          • /usr/bin/dirname
            dirname /tmp/files/convert.sh
            2⤵
              PID:1504
            • /usr/bin/dirname
              dirname /tmp/files/convert.sh
              2⤵
                PID:1505
              • /usr/bin/which
                which cabextract
                2⤵
                  PID:1506

              Network

              MITRE ATT&CK Matrix

              Replay Monitor

              Loading Replay Monitor...

              Downloads