b83f64175aa443e79c884ed5f7d3cf14c585f8011d00ec43968ca6826dffabb7 | Triage

Analysis

max time kernel
0s
max time network
128s
platform
ubuntu-18.04_amd64
resource
ubuntu1804-amd64-20240508-en
resource tags

arch:amd64arch:i386image:ubuntu1804-amd64-20240508-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system
submitted
21/05/2024, 05:24

Sharing

Report Analysis Logs

General

Target

x_rm.sh
Size

214B
MD5

f7e895fadccf2a2d4eea2d526d3254e1
SHA1

2d34e1d5d4682d944fb65eb9fef847d18fb6734f
SHA256

8f878d6f11c909e0608eaed70419a352b69bf7c8aa7965516aa61ce0b4c55cdd
SHA512

57f4bec8eeba821b7b46ede2b0a9da7f8ab9f4ebc3f26f8794b6dd549d106b19cde5ae09cb9f59145586d5d7b0c58f14b3f2019b7cc60a6241316a708b9b22bf

Score

3^/10

Malware Config

Signatures

Reads runtime system information 2 IoCs

Reads data from /proc virtual filesystem.

description	ioc	Process
File opened for reading	/proc/self/maps	awk
File opened for reading	/proc/self/maps	awk

/tmp/x_rm.sh
/tmp/x_rm.sh
1⤵
PID:1506
- /usr/bin/awk
  awk "{print \$1}"
  2⤵
  - Reads runtime system information
  PID:1510
- /bin/grep
  grep dockerui
  2⤵
  PID:1509
- /usr/bin/awk
  awk "{print \$3}"
  2⤵
  - Reads runtime system information
  PID:1514
- /bin/grep
  grep dockerui
  2⤵
  PID:1513

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads