Overview

overview

6

Static

static

1

post-install.sh

ubuntu-18.04-amd64

1

post-install.sh

debian-9-armhf

1

post-install.sh

debian-9-mips

post-install.sh

debian-9-mipsel

post-uninstall.sh

ubuntu-18.04-amd64

1

post-uninstall.sh

debian-9-armhf

1

post-uninstall.sh

debian-9-mips

post-uninstall.sh

debian-9-mipsel

pre-install.sh

ubuntu-18.04-amd64

1

pre-install.sh

debian-9-armhf

1

pre-install.sh

debian-9-mips

pre-install.sh

debian-9-mipsel

pre-uninstall.sh

ubuntu-18.04-amd64

1

pre-uninstall.sh

debian-9-armhf

1

pre-uninstall.sh

debian-9-mips

pre-uninstall.sh

debian-9-mipsel

start-stop.sh

ubuntu-18.04-amd64

1

start-stop.sh

debian-9-armhf

1

start-stop.sh

debian-9-mips

start-stop.sh

debian-9-mipsel

bin/xCloudClient

ubuntu-18.04-amd64

6

monitor.sh

ubuntu-18.04-amd64

1

monitor.sh

debian-9-armhf

1

monitor.sh

debian-9-mips

monitor.sh

debian-9-mipsel

restart_xcloud.sh

ubuntu-18.04-amd64

1

restart_xcloud.sh

debian-9-armhf

1

restart_xcloud.sh

debian-9-mips

restart_xcloud.sh

debian-9-mipsel

searchSharePath.sh

ubuntu-18.04-amd64

3

searchSharePath.sh

debian-9-armhf

1

searchSharePath.sh

debian-9-mips

Analysis

  • max time kernel
    0s
  • max time network
    131s
  • platform
    ubuntu-18.04_amd64
  • resource
    ubuntu1804-amd64-20240508-en
  • resource tags

    arch:amd64arch:i386image:ubuntu1804-amd64-20240508-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system
  • submitted
    21-05-2024 06:05

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    monitor.sh

  • Size

    410B

  • MD5

    a5953d716801e36646b74332c82180dc

  • SHA1

    49fb45c52f082bd3fbf5d7c8470cdcd57fb39a92

  • SHA256

    abb829c00c8d69ced17cf2a2aefb98cf2f252cccd899da7eec856606903e6fc9

  • SHA512

    cd81433231be39f5869eecce7c21c6f5ca08f13b1d68aa9732722a60f98b9298f603edb5ff0a318d0ac18bffcfafcd9bcd8901e2658b42b27c7a3d0da568617d

Score
1/10

Malware Config

Signatures

Processes

  • /tmp/monitor.sh
    /tmp/monitor.sh
    1⤵
      PID:1488
      • /bin/sleep
        sleep 86400
        2⤵
          PID:1489

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads