b83f64175aa443e79c884ed5f7d3cf14c585f8011d00ec43968ca6826dffabb7 | Triage

Analysis

max time kernel
0s
max time network
131s
platform
ubuntu-18.04_amd64
resource
ubuntu1804-amd64-20240508-en
resource tags

arch:amd64arch:i386image:ubuntu1804-amd64-20240508-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system
submitted
21/05/2024, 05:24

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

pre-uninstall.sh
Size

365B
MD5

c3a0c39c3e0d83ef649e972891c6b0cd
SHA1

b1d3cec0dc29ae265928e7f9ca4e4fd9ac4355af
SHA256

7098beb341059f41d94c4073f8ed7fb8dc0ff04788f240eb80f1c22a2f197eea
SHA512

9f6714d3f6dd3e0737c12c708c0681e1c40286d4639d236eabb13ffa5ac6b49a808088316a4f20fc5fcbc03b449a34280a8f925a4098c6c36bc2f02f644dd0d2

Score

3^/10

Malware Config

Signatures

Reads runtime system information 2 IoCs

Reads data from /proc virtual filesystem.

description	ioc	Process
File opened for reading	/proc/self/maps	awk
File opened for reading	/proc/self/maps	awk

/tmp/pre-uninstall.sh
/tmp/pre-uninstall.sh
1⤵
PID:1479
- /bin/grep
  grep dockerui
  2⤵
  PID:1482
- /usr/bin/awk
  awk "{print \$1}"
  2⤵
  - Reads runtime system information
  PID:1483
- /usr/bin/awk
  awk "{print \$3}"
  2⤵
  - Reads runtime system information
  PID:1487
- /bin/grep
  grep dockerui
  2⤵
  PID:1486

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads