Analysis

  • max time kernel
    2s
  • platform
    debian-9_mipsel
  • resource
    debian9-mipsel-20240611-en
  • resource tags

    arch:mipselimage:debian9-mipsel-20240611-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipselsystem
  • submitted
    15-09-2024 16:54

General

  • Target

    epigrass-2.0a4/Epigrass/elasticnodes.py

  • Size

    13KB

  • MD5

    5d8a1b864d7720eb848ae8e2ac9a0543

  • SHA1

    e3329157f220a17f2f67d8a836db72292c508a98

  • SHA256

    373e3f95d29e73a7fccce5ec7c63e47784e9bb93f97478b8f9c54885403ae36b

  • SHA512

    9b6b48f2df312403087d7393957a126deaabd822194cab9825683bb71dec7cb6ef0f7cee131b54b5e2f896bc55b58b5731d082457edee2bc23f0786981be8349

  • SSDEEP

    96:f9zkzU+VPtUIQxDLhaTtbl/7ppjZ2g4znOZ0ZQPK/4dJdDz5KHetz3N+IKi/gXP0:fRoCDVMXeoi6/M+NKIDK0N97rtcloJ

Score
3/10

Malware Config

Signatures

  • Command and Scripting Interpreter: Python 1 TTPs 4 IoCs

    Execution via Python.

Processes

  • /tmp/epigrass-2.0a4/Epigrass/elasticnodes.py
    /tmp/epigrass-2.0a4/Epigrass/elasticnodes.py
    1⤵
      PID:722
    • /usr/local/sbin/python
      python /tmp/epigrass-2.0a4/Epigrass/elasticnodes.py
      1⤵
      • Command and Scripting Interpreter: Python
      PID:722
    • /usr/local/bin/python
      python /tmp/epigrass-2.0a4/Epigrass/elasticnodes.py
      1⤵
      • Command and Scripting Interpreter: Python
      PID:722
    • /usr/sbin/python
      python /tmp/epigrass-2.0a4/Epigrass/elasticnodes.py
      1⤵
      • Command and Scripting Interpreter: Python
      PID:722
    • /usr/bin/python
      python /tmp/epigrass-2.0a4/Epigrass/elasticnodes.py
      1⤵
      • Command and Scripting Interpreter: Python
      PID:722

    Network

    MITRE ATT&CK Enterprise v15

    Replay Monitor

    Loading Replay Monitor...

    Downloads