Overview

overview

3

Static

static

1

downloadKubekey.sh

ubuntu-18.04-amd64

3

downloadKubekey.sh

debian-9-armhf

1

downloadKubekey.sh

debian-9-mips

downloadKubekey.sh

debian-9-mipsel

Analysis

  • max time kernel
    148s
  • max time network
    128s
  • platform
    ubuntu-18.04_amd64
  • resource
    ubuntu1804-amd64-20240508-en
  • resource tags

    arch:amd64arch:i386image:ubuntu1804-amd64-20240508-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system
  • submitted
    22/05/2024, 12:25

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    downloadKubekey.sh

  • Size

    2KB

  • MD5

    6c9fc091c670afd28d5659ac7417ef02

  • SHA1

    5d48604b5b6668d3c3f66f113061dac776649ecd

  • SHA256

    f9699fcd0aaaf66494e311e4ddc851aeb2772d897cf87e16ec20f04d12b808d0

  • SHA512

    ed2634a7ad8f9c1792dbf9431200e2fc81d2512521410ee8972b7404fe944c41f97428d44a5323fcf5af4f5a15fa82d3a523d5205d9c09df9044e33647b52ce4

Score
3/10

Malware Config

Signatures

  • Reads runtime system information 1 IoCs

    Reads data from /proc virtual filesystem.

Processes

  • /tmp/downloadKubekey.sh
    /tmp/downloadKubekey.sh
    1⤵
      PID:1511
      • /bin/uname
        uname
        2⤵
          PID:1512
        • /usr/bin/awk
          awk -F/ "{ print \$2}"
          2⤵
          • Reads runtime system information
          PID:1518
        • /usr/bin/tail
          tail -1
          2⤵
            PID:1517
          • /usr/bin/sort
            sort --version-sort
            2⤵
              PID:1516
            • /bin/grep
              grep -o "download/v[0-9]*.[0-9]*.[0-9]*/"
              2⤵
                PID:1515
              • /usr/bin/curl
                curl -sL https://api.github.com/repos/kubesphere/kubekey/releases
                2⤵
                  PID:1514

              Network

              MITRE ATT&CK Matrix

              Replay Monitor

              Loading Replay Monitor...

              Downloads