Analysis

  • max time kernel
    0s
  • platform
    debian-9_armhf
  • resource
    debian9-armhf-20240611-en
  • resource tags

    arch:armhfimage:debian9-armhf-20240611-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem
  • submitted
    15-09-2024 17:00

General

  • Target

    epigrass-1.5.1/Epigrass/epiplay2.py

  • Size

    9KB

  • MD5

    6d40eed91d48407562921993b3a0b2ec

  • SHA1

    e1aaedfb628cb5b80234a6c64097c70ad9bf2e8d

  • SHA256

    3f403af5d14065dabfd705ddcfc6a21b6ab339a70a5acd99889a46e0aa3319f8

  • SHA512

    e07f8d14c33080b8bbd9a536429ebfb78134705640a03c38cbe70b0b1a50a19a1fe4fc46f9c69a380155e76bb063fb9b2b136d16261c4eda407e0a36101c2fbf

  • SSDEEP

    192:7lsPNKYOTQmMeGJrg1xuYQvUVJuq7JXBcJUuj07:7sNKTQQGdgnuYQv5q7JyJK

Score
3/10

Malware Config

Signatures

  • Command and Scripting Interpreter: Python 1 TTPs 4 IoCs

    Execution via Python.

Processes

  • /tmp/epigrass-1.5.1/Epigrass/epiplay2.py
    /tmp/epigrass-1.5.1/Epigrass/epiplay2.py
    1⤵
      PID:659
    • /usr/local/sbin/python
      python /tmp/epigrass-1.5.1/Epigrass/epiplay2.py
      1⤵
      • Command and Scripting Interpreter: Python
      PID:659
    • /usr/local/bin/python
      python /tmp/epigrass-1.5.1/Epigrass/epiplay2.py
      1⤵
      • Command and Scripting Interpreter: Python
      PID:659
    • /usr/sbin/python
      python /tmp/epigrass-1.5.1/Epigrass/epiplay2.py
      1⤵
      • Command and Scripting Interpreter: Python
      PID:659
    • /usr/bin/python
      python /tmp/epigrass-1.5.1/Epigrass/epiplay2.py
      1⤵
      • Command and Scripting Interpreter: Python
      PID:659

    Network

    MITRE ATT&CK Enterprise v15

    Replay Monitor

    Loading Replay Monitor...

    Downloads