Analysis
-
max time kernel
0s -
max time network
128s -
platform
ubuntu-18.04_amd64 -
resource
ubuntu1804-amd64-20240508-en -
resource tags
arch:amd64arch:i386image:ubuntu1804-amd64-20240508-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system -
submitted
21-05-2024 05:40
Static task
static1
Behavioral task
behavioral1
Sample
install-ton-mining.sh
Resource
ubuntu1804-amd64-20240508-en
Behavioral task
behavioral2
Sample
install-ton-mining.sh
Resource
debian9-armhf-20240226-en
Behavioral task
behavioral3
Sample
install-ton-mining.sh
Resource
debian9-mipsbe-20240226-en
Behavioral task
behavioral4
Sample
install-ton-mining.sh
Resource
debian9-mipsel-20240226-en
General
-
Target
install-ton-mining.sh
-
Size
3KB
-
MD5
964dc009220e077a2da7f1a4457312da
-
SHA1
7df7a9673c9777a8b77069df3806b9fcb53d03bd
-
SHA256
e642effa5c2e1b50711a1324d3eb821cede8fd03bd704895f950585075cbbae8
-
SHA512
e4739c5da1316a406f2864c7bcb8138f0e27d6e544eea83033649edf35f32e51e540fe77446a9ddcaeaa9c6295e1f3e6a4bcd6daae6d03f0de98d5fb525a9946
Malware Config
Signatures
-
Reads runtime system information 4 IoCs
Reads data from /proc virtual filesystem.
description ioc Process File opened for reading /proc/filesystems id File opened for reading /proc/filesystems sudo File opened for reading /proc/sys/kernel/ngroups_max sudo File opened for reading /proc/self/stat sudo
Processes
-
/tmp/install-ton-mining.sh/tmp/install-ton-mining.sh1⤵PID:1490
-
/usr/bin/idid -u2⤵
- Reads runtime system information
PID:1491
-
-
/usr/bin/sudosudo apt install -y build-essential git make cmake clang libgflags-dev zlib1g-dev libssl-dev libreadline-dev libmicrohttpd-dev pkg-config libgsl-dev python3 python3-dev python3-pip curl mc bc screen2⤵
- Reads runtime system information
PID:1492
-