Overview

overview

3

Static

static

1

install.sh

ubuntu-18.04-amd64

1

install.sh

debian-9-armhf

1

install.sh

debian-9-mips

install.sh

debian-9-mipsel

post-install.sh

ubuntu-18.04-amd64

1

post-install.sh

debian-9-armhf

1

post-install.sh

debian-9-mips

post-install.sh

debian-9-mipsel

post-uninstall.sh

ubuntu-18.04-amd64

1

post-uninstall.sh

debian-9-armhf

1

post-uninstall.sh

debian-9-mips

post-uninstall.sh

debian-9-mipsel

pre-install.sh

ubuntu-18.04-amd64

1

pre-install.sh

debian-9-armhf

1

pre-install.sh

debian-9-mips

pre-install.sh

debian-9-mipsel

pre-uninstall.sh

ubuntu-18.04-amd64

3

pre-uninstall.sh

debian-9-armhf

1

pre-uninstall.sh

debian-9-mips

pre-uninstall.sh

debian-9-mipsel

start-stop.sh

ubuntu-18.04-amd64

3

start-stop.sh

debian-9-armhf

1

start-stop.sh

debian-9-mips

start-stop.sh

debian-9-mipsel

x_rm.sh

ubuntu-18.04-amd64

3

x_rm.sh

debian-9-armhf

1

x_rm.sh

debian-9-mips

x_rm.sh

debian-9-mipsel

Analysis

  • max time kernel
    0s
  • max time network
    128s
  • platform
    ubuntu-18.04_amd64
  • resource
    ubuntu1804-amd64-20240508-en
  • resource tags

    arch:amd64arch:i386image:ubuntu1804-amd64-20240508-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system
  • submitted
    21-05-2024 05:24

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    start-stop.sh

  • Size

    563B

  • MD5

    0188e39db137a04809f2251a7c275738

  • SHA1

    053c31dd71e84ea3ff58ffdc84dec40da24b123a

  • SHA256

    bd78bd7bd76f36452d05981c5183b2e0a3e5624385f8575a6c8d4c84405a0122

  • SHA512

    9ae4e8c25a77550085fbc1c120da50979870ba35e72984811c4b109054b828a4e7e0928fee7ff483b5fdbdb846f080ab86382fec5340b7a1d40a4651c6f1ffda

Score
3/10

Malware Config

Signatures

  • Reads runtime system information 1 IoCs

    Reads data from /proc virtual filesystem.

Processes

  • /tmp/start-stop.sh
    /tmp/start-stop.sh
    1⤵
      PID:1514
      • /usr/bin/awk
        awk "{print \$1}"
        2⤵
        • Reads runtime system information
        PID:1518
      • /bin/grep
        grep microbox/dockerui
        2⤵
          PID:1517

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads