Overview
overview
4Static
static
1.rsync/c/go
ubuntu-18.04-amd64
3.rsync/c/go
debian-9-armhf
3.rsync/c/go
debian-9-mips
3.rsync/c/go
debian-9-mipsel
3.rsync/c/l...c.so.6
ubuntu-24.04-amd64
.rsync/c/l...l.so.2
ubuntu-24.04-amd64
1.rsync/c/l...s.so.2
ubuntu-24.04-amd64
1.rsync/c/l...s.so.2
ubuntu-24.04-amd64
1.rsync/c/l...d.so.0
ubuntu-24.04-amd64
.rsync/c/l....23.so
ubuntu-24.04-amd64
1.rsync/c/l...v.so.2
ubuntu-18.04-amd64
1.rsync/c/lib/32/tsm
ubuntu-24.04-amd64
1.rsync/c/l...c.so.6
ubuntu-24.04-amd64
1.rsync/c/l...l.so.2
ubuntu-22.04-amd64
1.rsync/c/l...s.so.2
ubuntu-22.04-amd64
1.rsync/c/l...s.so.2
ubuntu-22.04-amd64
1.rsync/c/l...d.so.0
ubuntu-22.04-amd64
1.rsync/c/l....23.so
ubuntu-22.04-amd64
1.rsync/c/l...v.so.2
ubuntu-22.04-amd64
1.rsync/c/lib/64/tsm
ubuntu-24.04-amd64
1.rsync/c/run
ubuntu-18.04-amd64
4.rsync/c/run
debian-9-armhf
4.rsync/c/run
debian-9-mips
4.rsync/c/run
debian-9-mipsel
4.rsync/c/slow
ubuntu-18.04-amd64
1.rsync/c/slow
debian-9-armhf
1.rsync/c/slow
debian-9-mips
1.rsync/c/slow
debian-9-mipsel
1.rsync/c/tsm
ubuntu-18.04-amd64
1.rsync/c/tsm
debian-9-armhf
1.rsync/c/tsm
debian-9-mips
1.rsync/c/tsm
debian-9-mipsel
1Analysis
-
max time kernel
19s -
platform
debian-9_mipsel -
resource
debian9-mipsel-20240418-en -
resource tags
arch:mipselimage:debian9-mipsel-20240418-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipselsystem -
submitted
01-07-2024 10:28
Static task
static1
Behavioral task
behavioral1
Sample
.rsync/c/go
Resource
ubuntu1804-amd64-20240508-en
Behavioral task
behavioral2
Sample
.rsync/c/go
Resource
debian9-armhf-20240611-en
Behavioral task
behavioral3
Sample
.rsync/c/go
Resource
debian9-mipsbe-20240418-en
Behavioral task
behavioral4
Sample
.rsync/c/go
Resource
debian9-mipsel-20240418-en
Behavioral task
behavioral5
Sample
.rsync/c/lib/32/libc.so.6
Resource
ubuntu2404-amd64-20240523-en
Behavioral task
behavioral6
Sample
.rsync/c/lib/32/libdl.so.2
Resource
ubuntu2404-amd64-20240523-en
Behavioral task
behavioral7
Sample
.rsync/c/lib/32/libnss_dns.so.2
Resource
ubuntu2404-amd64-20240523-en
Behavioral task
behavioral8
Sample
.rsync/c/lib/32/libnss_files.so.2
Resource
ubuntu2404-amd64-20240523-en
Behavioral task
behavioral9
Sample
.rsync/c/lib/32/libpthread.so.0
Resource
ubuntu2404-amd64-20240523-en
Behavioral task
behavioral10
Sample
.rsync/c/lib/32/libresolv-2.23.so
Resource
ubuntu2404-amd64-20240523-en
Behavioral task
behavioral11
Sample
.rsync/c/lib/32/libresolv.so.2
Resource
ubuntu1804-amd64-20240611-en
Behavioral task
behavioral12
Sample
.rsync/c/lib/32/tsm
Resource
ubuntu2404-amd64-20240523-en
Behavioral task
behavioral13
Sample
.rsync/c/lib/64/libc.so.6
Resource
ubuntu2404-amd64-20240523-en
Behavioral task
behavioral14
Sample
.rsync/c/lib/64/libdl.so.2
Resource
ubuntu2204-amd64-20240611-en
Behavioral task
behavioral15
Sample
.rsync/c/lib/64/libnss_dns.so.2
Resource
ubuntu2204-amd64-20240522.1-en
Behavioral task
behavioral16
Sample
.rsync/c/lib/64/libnss_files.so.2
Resource
ubuntu2204-amd64-20240522.1-en
Behavioral task
behavioral17
Sample
.rsync/c/lib/64/libpthread.so.0
Resource
ubuntu2204-amd64-20240611-en
Behavioral task
behavioral18
Sample
.rsync/c/lib/64/libresolv-2.23.so
Resource
ubuntu2204-amd64-20240611-en
Behavioral task
behavioral19
Sample
.rsync/c/lib/64/libresolv.so.2
Resource
ubuntu2204-amd64-20240611-en
Behavioral task
behavioral20
Sample
.rsync/c/lib/64/tsm
Resource
ubuntu2404-amd64-20240523-en
Behavioral task
behavioral21
Sample
.rsync/c/run
Resource
ubuntu1804-amd64-20240508-en
Behavioral task
behavioral22
Sample
.rsync/c/run
Resource
debian9-armhf-20240611-en
Behavioral task
behavioral23
Sample
.rsync/c/run
Resource
debian9-mipsbe-20240611-en
Behavioral task
behavioral24
Sample
.rsync/c/run
Resource
debian9-mipsel-20240418-en
Behavioral task
behavioral25
Sample
.rsync/c/slow
Resource
ubuntu1804-amd64-20240611-en
Behavioral task
behavioral26
Sample
.rsync/c/slow
Resource
debian9-armhf-20240418-en
Behavioral task
behavioral27
Sample
.rsync/c/slow
Resource
debian9-mipsbe-20240611-en
Behavioral task
behavioral28
Sample
.rsync/c/slow
Resource
debian9-mipsel-20240418-en
Behavioral task
behavioral29
Sample
.rsync/c/tsm
Resource
ubuntu1804-amd64-20240611-en
Behavioral task
behavioral30
Sample
.rsync/c/tsm
Resource
debian9-armhf-20240611-en
Behavioral task
behavioral31
Sample
.rsync/c/tsm
Resource
debian9-mipsbe-20240418-en
Behavioral task
behavioral32
Sample
.rsync/c/tsm
Resource
debian9-mipsel-20240418-en
General
-
Target
.rsync/c/run
-
Size
209B
-
MD5
14d81e980c0ca2f21cfa386dbaeffc11
-
SHA1
1736595cff66a4e29e749435d7a0a92a67c789b3
-
SHA256
380244e59ba1b19961645d16da290b1111efc8131ae4da30fc1dde15639f2796
-
SHA512
1e70258404880648d2a5b5b231e816bc7ed909d7a2d100d87ac85cc29b2b25ab730bef088ded84b3ac4c65705cb18ca5b0ff882446b6fe701756ac52e42c46fe
Malware Config
Signatures
-
Checks CPU configuration 1 TTPs 1 IoCs
Checks CPU information which indicate if the system is a virtual machine.
Processes:
catdescription ioc process File opened for reading /proc/cpuinfo cat
Processes
-
/tmp/.rsync/c/run/tmp/.rsync/c/run1⤵
-
/bin/grepgrep name2⤵
-
/bin/grepgrep model2⤵
-
/usr/bin/wcwc -l2⤵
-
/bin/catcat /proc/cpuinfo2⤵
- Checks CPU configuration
-
/bin/sleepsleep 152⤵
-
/tmp/.rsync/c/stop./stop2⤵
-
/bin/sleepsleep 32⤵
-
/bin/sleepsleep 1362⤵