Analysis

  • max time kernel
    0s
  • max time network
    131s
  • platform
    ubuntu-18.04_amd64
  • resource
    ubuntu1804-amd64-20240611-en
  • resource tags

    arch:amd64arch:i386image:ubuntu1804-amd64-20240611-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system
  • submitted
    15-09-2024 16:53

General

  • Target

    epigrass-2.0b1/Epigrass/elasticnodes.py

  • Size

    13KB

  • MD5

    5d8a1b864d7720eb848ae8e2ac9a0543

  • SHA1

    e3329157f220a17f2f67d8a836db72292c508a98

  • SHA256

    373e3f95d29e73a7fccce5ec7c63e47784e9bb93f97478b8f9c54885403ae36b

  • SHA512

    9b6b48f2df312403087d7393957a126deaabd822194cab9825683bb71dec7cb6ef0f7cee131b54b5e2f896bc55b58b5731d082457edee2bc23f0786981be8349

  • SSDEEP

    96:f9zkzU+VPtUIQxDLhaTtbl/7ppjZ2g4znOZ0ZQPK/4dJdDz5KHetz3N+IKi/gXP0:fRoCDVMXeoi6/M+NKIDK0N97rtcloJ

Score
3/10

Malware Config

Signatures

  • Command and Scripting Interpreter: Python 1 TTPs 4 IoCs

    Execution via Python.

Processes

  • /tmp/epigrass-2.0b1/Epigrass/elasticnodes.py
    /tmp/epigrass-2.0b1/Epigrass/elasticnodes.py
    1⤵
      PID:1479
    • /usr/local/sbin/python
      python /tmp/epigrass-2.0b1/Epigrass/elasticnodes.py
      1⤵
      • Command and Scripting Interpreter: Python
      PID:1479
    • /usr/local/bin/python
      python /tmp/epigrass-2.0b1/Epigrass/elasticnodes.py
      1⤵
      • Command and Scripting Interpreter: Python
      PID:1479
    • /usr/sbin/python
      python /tmp/epigrass-2.0b1/Epigrass/elasticnodes.py
      1⤵
      • Command and Scripting Interpreter: Python
      PID:1479
    • /usr/bin/python
      python /tmp/epigrass-2.0b1/Epigrass/elasticnodes.py
      1⤵
      • Command and Scripting Interpreter: Python
      PID:1479

    Network

    MITRE ATT&CK Enterprise v15

    Replay Monitor

    Loading Replay Monitor...

    Downloads