Analysis

  • max time kernel
    2s
  • platform
    debian-9_armhf
  • resource
    debian9-armhf-20240611-en
  • resource tags

    arch:armhfimage:debian9-armhf-20240611-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem
  • submitted
    28/06/2024, 14:05

General

  • Target

    Microsoft NTFS by Tuxera 2019/Install Tuxera NTFS.app/Contents/Resources/Packages/Bundle/Install Tux

  • Size

    2KB

  • MD5

    f2f7f5811ac825b9c4638572ded20a8a

  • SHA1

    f89de3f414ae7438968d51127a0866869194b57f

  • SHA256

    6e4a4c5e9e62e31d9e16b4e77881b47f1ea3b571079867ebb0a2a846bd8ebae5

  • SHA512

    918ee0c90a10b2db2eb6c0ad1487e15c264852b4047dfad5d49e62a67bbc4f5152991d50c62c617d4bc2fc5e59d39ba646207ebc869d8b9c5b9b4f790c3aa260

Score
3/10

Malware Config

Signatures

  • Reads runtime system information 1 IoCs

    Reads data from /proc virtual filesystem.

Processes

  • /tmp/Microsoft NTFS by Tuxera 2019/Install Tuxera NTFS.app/Contents/Resources/Packages/Bundle/Install Tux
    "/tmp/Microsoft NTFS by Tuxera 2019/Install Tuxera NTFS.app/Contents/Resources/Packages/Bundle/Install Tux"
    1⤵
      PID:725
      • /bin/mkdir
        mkdir -p "/Library/Application Support/Tuxera NTFS"
        2⤵
        • Reads runtime system information
        PID:729
      • /bin/chmod
        chmod 0755 "/Library/Application Support/Tuxera NTFS"
        2⤵
          PID:734
        • /bin/mktemp
          mktemp -d /tmp/tuxera_ntfs_for_mac_installer_XXXXXX
          2⤵
            PID:735
          • /bin/rm
            rm -rf /tmp/tuxera_ntfs_for_mac_installer_dKw0pT
            2⤵
              PID:738

          Network

          MITRE ATT&CK Matrix

          Replay Monitor

          Loading Replay Monitor...

          Downloads