Overview

overview

10

Static

static

10

04d136f4c2...nknown

ubuntu-18.04-amd64

3

04d136f4c2...nknown

debian-9-armhf

3

04d136f4c2...nknown

debian-9-mips

7

04d136f4c2...nknown

debian-9-mipsel

7

3782e0dedb...2d.elf

ubuntu-22.04-amd64

3

4b76ad80e9...c6.exe

windows7-x64

7

4b76ad80e9...c6.exe

windows10-2004-x64

7

Analysis

  • max time kernel
    1s
  • max time network
    131s
  • platform
    ubuntu-18.04_amd64
  • resource
    ubuntu1804-amd64-20240508-en
  • resource tags

    arch:amd64arch:i386image:ubuntu1804-amd64-20240508-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system
  • submitted
    16-09-2024 13:50

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    04d136f4c2bac4196b1795bcd9e625029d686c696e7decabd17970da22a35caf.unknown

  • Size

    371KB

  • MD5

    2b9c8949f8a38de75f7c692d7d768591

  • SHA1

    328d235e38f05b97eadfba5b3aa27826cbb4af66

  • SHA256

    04d136f4c2bac4196b1795bcd9e625029d686c696e7decabd17970da22a35caf

  • SHA512

    e7bdbe98af08501b35ecedaceb2707d4079e5cae62d00161d67328f82e51fa34b3dc94c274596acaad021c1f2db572d991951e63260e294d403c04a8d74f7c34

  • SSDEEP

    6144:pyZjxSZjEVdlcV5r2rjJUfJakVtj+Lp7R+0KoaGB068E4Xn6LFnnP1Iw2Q8TDpBX:pq9lcV5inJ0EkLjCpV+0KoaGBp/4Xn6S

Score
3/10
discovery

Malware Config

Signatures

  • Reads runtime system information 2 IoCs

    Reads data from /proc virtual filesystem.

    discovery
  • Writes file to tmp directory 2 IoCs

    Malware often drops required files in the /tmp directory.

Processes

  • /tmp/04d136f4c2bac4196b1795bcd9e625029d686c696e7decabd17970da22a35caf.unknown
    /tmp/04d136f4c2bac4196b1795bcd9e625029d686c696e7decabd17970da22a35caf.unknown
    1⤵
      PID:1508
    • /usr/local/sbin/python2
      python2 /tmp/04d136f4c2bac4196b1795bcd9e625029d686c696e7decabd17970da22a35caf.unknown
      1⤵
        PID:1508
      • /usr/local/bin/python2
        python2 /tmp/04d136f4c2bac4196b1795bcd9e625029d686c696e7decabd17970da22a35caf.unknown
        1⤵
          PID:1508
        • /usr/sbin/python2
          python2 /tmp/04d136f4c2bac4196b1795bcd9e625029d686c696e7decabd17970da22a35caf.unknown
          1⤵
            PID:1508
          • /usr/bin/python2
            python2 /tmp/04d136f4c2bac4196b1795bcd9e625029d686c696e7decabd17970da22a35caf.unknown
            1⤵
            • Reads runtime system information
            • Writes file to tmp directory
            PID:1508
            • /sbin/ldconfig
              /sbin/ldconfig -p
              2⤵
                PID:1512
              • /sbin/ldconfig.real
                /sbin/ldconfig.real -p
                2⤵
                  PID:1512

              Network

              MITRE ATT&CK Matrix

              Replay Monitor

              Loading Replay Monitor...

              Downloads

              • /tmp/.. /.logbackups
                Filesize

                4B

                MD5

                83f2550373f2f19492aa30fbd5b57512

                SHA1

                db8dc2b7a3bb754178d96fe9b4e434d0c017825b

                SHA256

                c8f5600f3eb7d801a067e02c477719d37f560491c4dca56eacc11ca755eb1ac6

                SHA512

                5ba77e79b4b068b0cfaf1297e1da85a800f6e28e0009f2fee7fdcf08235b18652f034186bb3c006981826ccdefcc5bff85871dcd1236f519b16f5d6bb68332dc

                Download Submit