Overview

overview

10

Static

static

10

04d136f4c2...nknown

ubuntu-18.04-amd64

3

04d136f4c2...nknown

debian-9-armhf

3

04d136f4c2...nknown

debian-9-mips

7

04d136f4c2...nknown

debian-9-mipsel

7

3782e0dedb...2d.elf

ubuntu-22.04-amd64

3

4b76ad80e9...c6.exe

windows7-x64

7

4b76ad80e9...c6.exe

windows10-2004-x64

7

Analysis

  • max time kernel
    13s
  • max time network
    16s
  • platform
    debian-9_armhf
  • resource
    debian9-armhf-20240729-en
  • resource tags

    arch:armhfimage:debian9-armhf-20240729-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem
  • submitted
    16-09-2024 13:50

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    04d136f4c2bac4196b1795bcd9e625029d686c696e7decabd17970da22a35caf.unknown

  • Size

    371KB

  • MD5

    2b9c8949f8a38de75f7c692d7d768591

  • SHA1

    328d235e38f05b97eadfba5b3aa27826cbb4af66

  • SHA256

    04d136f4c2bac4196b1795bcd9e625029d686c696e7decabd17970da22a35caf

  • SHA512

    e7bdbe98af08501b35ecedaceb2707d4079e5cae62d00161d67328f82e51fa34b3dc94c274596acaad021c1f2db572d991951e63260e294d403c04a8d74f7c34

  • SSDEEP

    6144:pyZjxSZjEVdlcV5r2rjJUfJakVtj+Lp7R+0KoaGB068E4Xn6LFnnP1Iw2Q8TDpBX:pq9lcV5inJ0EkLjCpV+0KoaGBp/4Xn6S

Score
3/10
discovery

Malware Config

Signatures

  • Reads runtime system information 2 IoCs

    Reads data from /proc virtual filesystem.

    discovery
  • Writes file to tmp directory 2 IoCs

    Malware often drops required files in the /tmp directory.

Processes

  • /tmp/04d136f4c2bac4196b1795bcd9e625029d686c696e7decabd17970da22a35caf.unknown
    /tmp/04d136f4c2bac4196b1795bcd9e625029d686c696e7decabd17970da22a35caf.unknown
    1⤵
      PID:645
    • /usr/local/sbin/python2
      python2 /tmp/04d136f4c2bac4196b1795bcd9e625029d686c696e7decabd17970da22a35caf.unknown
      1⤵
        PID:645
      • /usr/local/bin/python2
        python2 /tmp/04d136f4c2bac4196b1795bcd9e625029d686c696e7decabd17970da22a35caf.unknown
        1⤵
          PID:645
        • /usr/sbin/python2
          python2 /tmp/04d136f4c2bac4196b1795bcd9e625029d686c696e7decabd17970da22a35caf.unknown
          1⤵
            PID:645
          • /usr/bin/python2
            python2 /tmp/04d136f4c2bac4196b1795bcd9e625029d686c696e7decabd17970da22a35caf.unknown
            1⤵
            • Reads runtime system information
            • Writes file to tmp directory
            PID:645
            • /sbin/ldconfig
              /sbin/ldconfig -p
              2⤵
                PID:671

            Network

            MITRE ATT&CK Matrix

            Replay Monitor

            Loading Replay Monitor...

            Downloads

            • /tmp/.. /.logbackups
              Filesize

              3B

              MD5

              c8ed21db4f678f3b13b9d5ee16489088

              SHA1

              278e89d8c2da87688af1c1b00f468a10e7dbe61f

              SHA256

              0ebb3519a0c4044c4571b2408a52e7ed8009564205ca65a69fd43f232352f256

              SHA512

              6de6cc8efa3728936aab7159543e8f1d2fb5145d530e6e75fcb68b6b0f2b04ca1d45b1da33c332df57cbdff83e8f4e5173f1be670d28c37b5cfb981441b674a6

              Download Submit