Overview

overview

10

Static

static

10

04d136f4c2...nknown

ubuntu-18.04-amd64

3

04d136f4c2...nknown

debian-9-armhf

3

04d136f4c2...nknown

debian-9-mips

7

04d136f4c2...nknown

debian-9-mipsel

7

3782e0dedb...2d.elf

ubuntu-22.04-amd64

3

4b76ad80e9...c6.exe

windows7-x64

7

4b76ad80e9...c6.exe

windows10-2004-x64

7

Analysis

  • max time kernel
    1s
  • max time network
    128s
  • platform
    ubuntu-18.04_amd64
  • resource
    ubuntu1804-amd64-20240611-en
  • resource tags

    arch:amd64arch:i386image:ubuntu1804-amd64-20240611-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system
  • submitted
    16-09-2024 19:27

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    04d136f4c2bac4196b1795bcd9e625029d686c696e7decabd17970da22a35caf.unknown

  • Size

    371KB

  • MD5

    2b9c8949f8a38de75f7c692d7d768591

  • SHA1

    328d235e38f05b97eadfba5b3aa27826cbb4af66

  • SHA256

    04d136f4c2bac4196b1795bcd9e625029d686c696e7decabd17970da22a35caf

  • SHA512

    e7bdbe98af08501b35ecedaceb2707d4079e5cae62d00161d67328f82e51fa34b3dc94c274596acaad021c1f2db572d991951e63260e294d403c04a8d74f7c34

  • SSDEEP

    6144:pyZjxSZjEVdlcV5r2rjJUfJakVtj+Lp7R+0KoaGB068E4Xn6LFnnP1Iw2Q8TDpBX:pq9lcV5inJ0EkLjCpV+0KoaGBp/4Xn6S

Score
3/10
discovery

Malware Config

Signatures

  • Reads runtime system information 2 IoCs

    Reads data from /proc virtual filesystem.

    discovery
  • Writes file to tmp directory 2 IoCs

    Malware often drops required files in the /tmp directory.

Processes

  • /tmp/04d136f4c2bac4196b1795bcd9e625029d686c696e7decabd17970da22a35caf.unknown
    /tmp/04d136f4c2bac4196b1795bcd9e625029d686c696e7decabd17970da22a35caf.unknown
    1⤵
      PID:1518
    • /usr/local/sbin/python2
      python2 /tmp/04d136f4c2bac4196b1795bcd9e625029d686c696e7decabd17970da22a35caf.unknown
      1⤵
        PID:1518
      • /usr/local/bin/python2
        python2 /tmp/04d136f4c2bac4196b1795bcd9e625029d686c696e7decabd17970da22a35caf.unknown
        1⤵
          PID:1518
        • /usr/sbin/python2
          python2 /tmp/04d136f4c2bac4196b1795bcd9e625029d686c696e7decabd17970da22a35caf.unknown
          1⤵
            PID:1518
          • /usr/bin/python2
            python2 /tmp/04d136f4c2bac4196b1795bcd9e625029d686c696e7decabd17970da22a35caf.unknown
            1⤵
            • Reads runtime system information
            • Writes file to tmp directory
            PID:1518
            • /sbin/ldconfig
              /sbin/ldconfig -p
              2⤵
                PID:1519
              • /sbin/ldconfig.real
                /sbin/ldconfig.real -p
                2⤵
                  PID:1519

              Network

              MITRE ATT&CK Matrix

              Replay Monitor

              Loading Replay Monitor...

              Downloads

              • /tmp/.. /.logbackups
                Filesize

                4B

                MD5

                471c75ee6643a10934502bdafee198fb

                SHA1

                4458c79edc062c4d846a5bc0617561909ea8d106

                SHA256

                bce35ce6291ba5b8fb5fea32ec1aaed5556f355746882a9dd183857cb0e25967

                SHA512

                cf89f713e07f6b536d0920016da31f23e2551ad69758934ef68f9770ea0b5395afbba5f20a54a04c9b625bb61936e07bb0b5eeedf0378980ac0814e9b28f018c

                Download Submit