Resubmissions

12-06-2024 17:05

240612-vmcamasdqh 6

12-06-2024 16:56

240612-vft7vsscma 7

12-06-2024 16:50

240612-vcjxqasbna 6

12-06-2024 16:40

240612-t6wb6swank 6

Analysis

  • max time kernel
    0s
  • max time network
    147s
  • platform
    ubuntu-18.04_amd64
  • resource
    ubuntu1804-amd64-20240508-en
  • resource tags

    arch:amd64arch:i386image:ubuntu1804-amd64-20240508-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system
  • submitted
    12-06-2024 16:50

General

  • Target

    sketchyorignorant-main/SeTDOS

  • Size

    4KB

  • MD5

    757f34ad32a32adb1001e63164355ca6

  • SHA1

    65a7ffd3bc3e8cbe9651a84be752a6f438acc948

  • SHA256

    9ff264d24dfed98fccd78f87690365b4aca895185136fff01c9350a344607509

  • SHA512

    24dfc1b2220a7ad64a25623a57a61cb8a4154c323c5a3fe53112723989f77636ea3e9f32da3b1b870644061ecf02bd5a8ccfc103e31d33f147c4f96db737989c

  • SSDEEP

    96:/dJ+07/i/+ufKH0D6awgm4KZL14CIVKJ+JPJ5J473xSR502I2:/3d+DR//wgBXe7Si29

Score
6/10

Malware Config

Signatures

  • Deletes log files 1 TTPs 1 IoCs

    Deletes log files on the system.

  • Reads runtime system information 1 IoCs

    Reads data from /proc virtual filesystem.

Processes

  • /tmp/sketchyorignorant-main/SeTDOS
    /tmp/sketchyorignorant-main/SeTDOS
    1⤵
      PID:1503
      • /bin/mkdir
        mkdir -p /var/log/setup/tmp
        2⤵
        • Reads runtime system information
        PID:1504
      • /bin/rm
        rm -f /var/log/setup/tmp/SeTDOS
        2⤵
        • Deletes log files
        PID:1505
      • /usr/bin/touch
        touch /var/log/setup/tmp/SeTDOS
        2⤵
          PID:1506
        • /bin/fgrep
          fgrep -v Extend
          2⤵
            PID:1511
          • /usr/bin/sort
            sort
            2⤵
              PID:1512
            • /bin/fgrep
              fgrep -v "Ext'd"
              2⤵
                PID:1510
              • /bin/fgrep
                fgrep "DOS Win95 F Win98 F HPFS W95 F FAT12 FAT16"
                2⤵
                  PID:1509
                • /usr/local/sbin/grep
                  grep -F -v Extend
                  2⤵
                    PID:1511
                  • /usr/local/bin/grep
                    grep -F -v Extend
                    2⤵
                      PID:1511
                    • /usr/sbin/grep
                      grep -F -v Extend
                      2⤵
                        PID:1511
                      • /usr/bin/grep
                        grep -F -v Extend
                        2⤵
                          PID:1511
                        • /sbin/grep
                          grep -F -v Extend
                          2⤵
                            PID:1511
                          • /bin/grep
                            grep -F -v Extend
                            2⤵
                              PID:1511
                            • /usr/local/sbin/grep
                              grep -F -v "Ext'd"
                              2⤵
                                PID:1510
                              • /usr/local/bin/grep
                                grep -F -v "Ext'd"
                                2⤵
                                  PID:1510
                                • /usr/sbin/grep
                                  grep -F -v "Ext'd"
                                  2⤵
                                    PID:1510
                                  • /usr/bin/grep
                                    grep -F -v "Ext'd"
                                    2⤵
                                      PID:1510
                                    • /sbin/grep
                                      grep -F -v "Ext'd"
                                      2⤵
                                        PID:1510
                                      • /bin/grep
                                        grep -F -v "Ext'd"
                                        2⤵
                                          PID:1510
                                        • /usr/local/sbin/grep
                                          grep -F "DOS Win95 F Win98 F HPFS W95 F FAT12 FAT16"
                                          2⤵
                                            PID:1509
                                          • /usr/local/bin/grep
                                            grep -F "DOS Win95 F Win98 F HPFS W95 F FAT12 FAT16"
                                            2⤵
                                              PID:1509
                                            • /usr/sbin/grep
                                              grep -F "DOS Win95 F Win98 F HPFS W95 F FAT12 FAT16"
                                              2⤵
                                                PID:1509
                                              • /usr/bin/grep
                                                grep -F "DOS Win95 F Win98 F HPFS W95 F FAT12 FAT16"
                                                2⤵
                                                  PID:1509
                                                • /sbin/grep
                                                  grep -F "DOS Win95 F Win98 F HPFS W95 F FAT12 FAT16"
                                                  2⤵
                                                    PID:1509
                                                  • /bin/grep
                                                    grep -F "DOS Win95 F Win98 F HPFS W95 F FAT12 FAT16"
                                                    2⤵
                                                      PID:1509

                                                  Network

                                                  MITRE ATT&CK Enterprise v15

                                                  Replay Monitor

                                                  Loading Replay Monitor...

                                                  Downloads