Static task
static1
Behavioral task
behavioral1
Sample
Installer/sysinternalsEBPF/libsysinternalsEBPFinstaller
Resource
win10-20240404-en
Behavioral task
behavioral2
Sample
Installer/sysinternalsEBPF/sysinternalsEBPFmemDump.o
Resource
win10-20240404-en
Behavioral task
behavioral3
Sample
Installer/sysinternalsEBPF/sysinternalsEBPFrawSock.o
Resource
win10-20240611-en
Behavioral task
behavioral4
Sample
Installer/sysmoninstall.sh
Resource
win10-20240404-en
General
-
Target
Installer.tar.gz
-
Size
4.2MB
-
MD5
1bc64bde13103f10428658661493b8ee
-
SHA1
f94bb87aab57eb25b12be8111bfe5cce52eadb19
-
SHA256
abd3388f98f53c818871899e48bd3ff4cba952eda80865f9ac0ff649317b997c
-
SHA512
3f4f6b97fe0322602a0bb60c66c355f029c0a6687f57f785fb6dafc729d97966b55797d07c4f34e1352a322d92811bc8dd229aef22aef870f6dbacc575909531
-
SSDEEP
98304:uX52zjKlaOHiYYFwN3QDabH+dnjqQ1pOg:uX5Gj33YY2dQDabeFjq+f
Malware Config
Signatures
Files
-
Installer.tar.gz.gz
-
sample.tar
-
Installer/packages-microsoft-prod.deb
-
Installer/sysinternalsEBPF/ebpfKern/LICENSE
-
Installer/sysinternalsEBPF/ebpfKern/sysinternalsEBPF_common.h
-
Installer/sysinternalsEBPF/ebpfKern/sysinternalsEBPF_helpers.c
-
Installer/sysinternalsEBPF/ebpfKern/sysinternalsEBPFoffsets.h
-
Installer/sysinternalsEBPF/ebpfKern/sysinternalsEBPFshared.h
-
Installer/sysinternalsEBPF/getOffsets/LICENSE
-
Installer/sysinternalsEBPF/getOffsets/Makefile
-
Installer/sysinternalsEBPF/getOffsets/README.md
-
Installer/sysinternalsEBPF/getOffsets/extractOffsets.c
-
Installer/sysinternalsEBPF/getOffsets/getOffsets.c
-
Installer/sysinternalsEBPF/getOffsets/mount.h
-
Installer/sysinternalsEBPF/libbpf/LICENSE.LPGL-2.1
-
Installer/sysinternalsEBPF/libbpf/bpf_core_read.h
-
Installer/sysinternalsEBPF/libbpf/bpf_helper_defs.h
-
Installer/sysinternalsEBPF/libbpf/bpf_helpers.h
-
Installer/sysinternalsEBPF/libsysinternalsEBPFinstaller.elf linux x64
-
Installer/sysinternalsEBPF/offsets.json
-
Installer/sysinternalsEBPF/sysinternalsEBPFmemDump.o.elf linux
-
Installer/sysinternalsEBPF/sysinternalsEBPFrawSock.o.elf linux
-
Installer/sysmonforlinux_1.3.2_amd64.deb
-
Installer/sysmoninstall.sh.sh linux