Overview

overview

4

Static

static

1

install_6.0.sh

ubuntu-18.04-amd64

4

install_6.0.sh

debian-9-armhf

1

install_6.0.sh

debian-9-mips

install_6.0.sh

debian-9-mipsel

Analysis

  • max time kernel
    149s
  • max time network
    129s
  • platform
    ubuntu-18.04_amd64
  • resource
    ubuntu1804-amd64-20240508-en
  • resource tags

    arch:amd64arch:i386image:ubuntu1804-amd64-20240508-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system
  • submitted
    24-05-2024 13:04

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    install_6.0.sh

  • Size

    29KB

  • MD5

    70e29709cd6d0b527d17a3b8b42af2b6

  • SHA1

    f470362de5ed457250dc97cfb92bfb48aa1ca194

  • SHA256

    8767461c512abead62e7d0fdcbaea24139e447cfad9d03ef6240bcb313e98521

  • SHA512

    dd230bd1d190acced99b5431d44f61737a59a11989b68f40b2e347ab57dfe8fd9e1eefe40b3c494ed796b913efbfc12df2a1816229e583e466359779fbb1f9f0

  • SSDEEP

    768:tk/hQH7hzV2MTuGp2FMcOWhgFcRs/TkPk0slo443Two:2/hQH7hR2MTuGp4M5WhgWRs/TkPk0slk

Score
4/10
antivm

Malware Config

Signatures

  • Checks CPU configuration 1 TTPs 1 IoCs

    Checks CPU information which indicate if the system is a virtual machine.

    antivm
  • Reads runtime system information 1 IoCs

    Reads data from /proc virtual filesystem.

Processes

  • /tmp/install_6.0.sh
    /tmp/install_6.0.sh
    1⤵
      PID:1503
      • /bin/which
        which curl
        2⤵
          PID:1504
        • /usr/bin/curl
          curl -sS --connect-timeout 10 -m 10 https://www.bt.cn/api/wpanel/SetupCount
          2⤵
            PID:1505
          • /usr/bin/whoami
            whoami
            2⤵
              PID:1514
            • /usr/bin/getconf
              getconf LONG_BIT
              2⤵
                PID:1515
              • /bin/grep
                grep -iE "centos|Red Hat"
                2⤵
                  PID:1519
                • /bin/grep
                  grep " 6."
                  2⤵
                    PID:1518
                  • /bin/cat
                    cat /etc/redhat-release
                    2⤵
                      PID:1517
                    • /usr/bin/cut
                      cut -f 1 -d .
                      2⤵
                        PID:1524
                      • /usr/bin/awk
                        awk "{print \$2}"
                        2⤵
                        • Reads runtime system information
                        PID:1523
                      • /bin/grep
                        grep Ubuntu
                        2⤵
                          PID:1522
                        • /bin/cat
                          cat /etc/issue
                          2⤵
                            PID:1521
                          • /usr/bin/wc
                            wc -l
                            2⤵
                              PID:1528
                            • /bin/grep
                              grep processor
                              2⤵
                                PID:1527
                              • /bin/cat
                                cat /proc/cpuinfo
                                2⤵
                                • Checks CPU configuration
                                PID:1526

                            Network

                            MITRE ATT&CK Enterprise v15

                            Replay Monitor

                            Loading Replay Monitor...

                            Downloads