Overview
overview
3Static
static
1post-install.sh
ubuntu-18.04-amd64
3post-install.sh
debian-9-armhf
1post-install.sh
debian-9-mips
post-install.sh
debian-9-mipsel
pre-install.sh
ubuntu-18.04-amd64
1pre-install.sh
debian-9-armhf
1pre-install.sh
debian-9-mips
pre-install.sh
debian-9-mipsel
pre-uninstall.sh
ubuntu-18.04-amd64
1pre-uninstall.sh
debian-9-armhf
1pre-uninstall.sh
debian-9-mips
pre-uninstall.sh
debian-9-mipsel
start-stop.sh
ubuntu-18.04-amd64
1start-stop.sh
debian-9-armhf
1start-stop.sh
debian-9-mips
start-stop.sh
debian-9-mipsel
applicatio...x.html
windows7-x64
1applicatio...x.html
windows10-2004-x64
1applicatio...x.html
windows7-x64
1applicatio...x.html
windows10-2004-x64
1applicatio...oad.js
windows7-x64
3applicatio...oad.js
windows10-2004-x64
3applicatio...x.html
windows7-x64
1applicatio...x.html
windows10-2004-x64
1applicatio...x.html
windows7-x64
1applicatio...x.html
windows10-2004-x64
1applicatio...der.js
windows7-x64
3applicatio...der.js
windows10-2004-x64
3applicatio...x.html
windows7-x64
1applicatio...x.html
windows10-2004-x64
1applicatio...x.html
windows7-x64
1applicatio...x.html
windows10-2004-x64
1Analysis
-
max time kernel
0s -
max time network
128s -
platform
ubuntu-18.04_amd64 -
resource
ubuntu1804-amd64-20240508-en -
resource tags
arch:amd64arch:i386image:ubuntu1804-amd64-20240508-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system -
submitted
21-05-2024 05:52
Static task
static1
Behavioral task
behavioral1
Sample
post-install.sh
Resource
ubuntu1804-amd64-20240508-en
Behavioral task
behavioral2
Sample
post-install.sh
Resource
debian9-armhf-20240418-en
Behavioral task
behavioral3
Sample
post-install.sh
Resource
debian9-mipsbe-20240418-en
Behavioral task
behavioral4
Sample
post-install.sh
Resource
debian9-mipsel-20240418-en
Behavioral task
behavioral5
Sample
pre-install.sh
Resource
ubuntu1804-amd64-20240508-en
Behavioral task
behavioral6
Sample
pre-install.sh
Resource
debian9-armhf-20240418-en
Behavioral task
behavioral7
Sample
pre-install.sh
Resource
debian9-mipsbe-20240418-en
Behavioral task
behavioral8
Sample
pre-install.sh
Resource
debian9-mipsel-20240226-en
Behavioral task
behavioral9
Sample
pre-uninstall.sh
Resource
ubuntu1804-amd64-20240508-en
Behavioral task
behavioral10
Sample
pre-uninstall.sh
Resource
debian9-armhf-20240418-en
Behavioral task
behavioral11
Sample
pre-uninstall.sh
Resource
debian9-mipsbe-20240226-en
Behavioral task
behavioral12
Sample
pre-uninstall.sh
Resource
debian9-mipsel-20240226-en
Behavioral task
behavioral13
Sample
start-stop.sh
Resource
ubuntu1804-amd64-20240508-en
Behavioral task
behavioral14
Sample
start-stop.sh
Resource
debian9-armhf-20240226-en
Behavioral task
behavioral15
Sample
start-stop.sh
Resource
debian9-mipsbe-20240226-en
Behavioral task
behavioral16
Sample
start-stop.sh
Resource
debian9-mipsel-20240418-en
Behavioral task
behavioral17
Sample
application/cache/index.html
Resource
win7-20240221-en
Behavioral task
behavioral18
Sample
application/cache/index.html
Resource
win10v2004-20240508-en
Behavioral task
behavioral19
Sample
application/config/index.html
Resource
win7-20240221-en
Behavioral task
behavioral20
Sample
application/config/index.html
Resource
win10v2004-20240508-en
Behavioral task
behavioral21
Sample
application/controllers/api/Upload.js
Resource
win7-20240508-en
Behavioral task
behavioral22
Sample
application/controllers/api/Upload.js
Resource
win10v2004-20240426-en
Behavioral task
behavioral23
Sample
application/controllers/api/index.html
Resource
win7-20240221-en
Behavioral task
behavioral24
Sample
application/controllers/api/index.html
Resource
win10v2004-20240426-en
Behavioral task
behavioral25
Sample
application/controllers/index.html
Resource
win7-20240508-en
Behavioral task
behavioral26
Sample
application/controllers/index.html
Resource
win10v2004-20240508-en
Behavioral task
behavioral27
Sample
application/core/MY_Loader.js
Resource
win7-20240508-en
Behavioral task
behavioral28
Sample
application/core/MY_Loader.js
Resource
win10v2004-20240508-en
Behavioral task
behavioral29
Sample
application/core/index.html
Resource
win7-20231129-en
Behavioral task
behavioral30
Sample
application/core/index.html
Resource
win10v2004-20240426-en
Behavioral task
behavioral31
Sample
application/helpers/index.html
Resource
win7-20240215-en
Behavioral task
behavioral32
Sample
application/helpers/index.html
Resource
win10v2004-20240508-en
General
-
Target
post-install.sh
-
Size
998B
-
MD5
323814cbdccf86dc8e5fcb6892edc58b
-
SHA1
14b645b4c43fc692bcbe0b5ac2c27bac324996b3
-
SHA256
8f646300f3cb61486fcb32009cacfe8d882e2e4cb22b488a7bf3a238613e391a
-
SHA512
7c63af7662cac9f4d5b17e10fc3be0d0cb491855e139b45a22a066d9b4ec2df410cdedc1b66f5f386f8551371fdb8c6f41a9dcf7afca357e12f14db663da99bb
Malware Config
Signatures
-
Reads runtime system information 1 IoCs
Reads data from /proc virtual filesystem.
description ioc Process File opened for reading /proc/filesystems sed
Processes
-
/tmp/post-install.sh/tmp/post-install.sh1⤵PID:1506
-
/bin/sedsed -n "s/\$config\\['db_password'\\] = '\\(.*\\)';/\\1/p" /usr/local/AppCentral/photo-gallery/application/config/photo_gallery.php2⤵
- Reads runtime system information
PID:1507
-
-
/bin/chown/bin/chown admin:administrators /usr/local/AppCentral/photo-gallery/application/session/2⤵PID:1508
-
-
/bin/chown/bin/chown admin:administrators /usr/local/AppCentral/photo-gallery/application/upload/2⤵PID:1509
-
-
/usr/builtin/sbin/avahiregister/usr/builtin/sbin/avahiregister -reg pg "%h" _ASUSTOR_PG._tcp -22⤵PID:1510
-