Overview

overview

10

Static

static

10

04d136f4c2...nknown

ubuntu-18.04-amd64

3

04d136f4c2...nknown

debian-9-armhf

3

04d136f4c2...nknown

debian-9-mips

7

04d136f4c2...nknown

debian-9-mipsel

7

3782e0dedb...2d.elf

ubuntu-22.04-amd64

3

4b76ad80e9...c6.exe

windows7-x64

7

4b76ad80e9...c6.exe

windows10-2004-x64

7

Analysis

  • max time kernel
    33s
  • max time network
    37s
  • platform
    debian-9_armhf
  • resource
    debian9-armhf-20240611-en
  • resource tags

    arch:armhfimage:debian9-armhf-20240611-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem
  • submitted
    16-09-2024 19:27

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    04d136f4c2bac4196b1795bcd9e625029d686c696e7decabd17970da22a35caf.unknown

  • Size

    371KB

  • MD5

    2b9c8949f8a38de75f7c692d7d768591

  • SHA1

    328d235e38f05b97eadfba5b3aa27826cbb4af66

  • SHA256

    04d136f4c2bac4196b1795bcd9e625029d686c696e7decabd17970da22a35caf

  • SHA512

    e7bdbe98af08501b35ecedaceb2707d4079e5cae62d00161d67328f82e51fa34b3dc94c274596acaad021c1f2db572d991951e63260e294d403c04a8d74f7c34

  • SSDEEP

    6144:pyZjxSZjEVdlcV5r2rjJUfJakVtj+Lp7R+0KoaGB068E4Xn6LFnnP1Iw2Q8TDpBX:pq9lcV5inJ0EkLjCpV+0KoaGBp/4Xn6S

Score
3/10
discovery

Malware Config

Signatures

  • Reads runtime system information 2 IoCs

    Reads data from /proc virtual filesystem.

    discovery
  • Writes file to tmp directory 2 IoCs

    Malware often drops required files in the /tmp directory.

Processes

  • /tmp/04d136f4c2bac4196b1795bcd9e625029d686c696e7decabd17970da22a35caf.unknown
    /tmp/04d136f4c2bac4196b1795bcd9e625029d686c696e7decabd17970da22a35caf.unknown
    1⤵
      PID:674
    • /usr/local/sbin/python2
      python2 /tmp/04d136f4c2bac4196b1795bcd9e625029d686c696e7decabd17970da22a35caf.unknown
      1⤵
        PID:674
      • /usr/local/bin/python2
        python2 /tmp/04d136f4c2bac4196b1795bcd9e625029d686c696e7decabd17970da22a35caf.unknown
        1⤵
          PID:674
        • /usr/sbin/python2
          python2 /tmp/04d136f4c2bac4196b1795bcd9e625029d686c696e7decabd17970da22a35caf.unknown
          1⤵
            PID:674
          • /usr/bin/python2
            python2 /tmp/04d136f4c2bac4196b1795bcd9e625029d686c696e7decabd17970da22a35caf.unknown
            1⤵
            • Reads runtime system information
            • Writes file to tmp directory
            PID:674
            • /sbin/ldconfig
              /sbin/ldconfig -p
              2⤵
                PID:703

            Network

            MITRE ATT&CK Matrix

            Replay Monitor

            Loading Replay Monitor...

            Downloads

            • /tmp/.. /.logbackups
              Filesize

              3B

              MD5

              2823f4797102ce1a1aec05359cc16dd9

              SHA1

              8989f7bc2eb8e9ae09553acd93f997372f7add7b

              SHA256

              a7f0b84de7a450eaf6ffab449cb0f141b69eb701ffb455f375c3dae4277b25c1

              SHA512

              64b8d14deca790e9e33d8921462cd23cf15bffbfb822ef83d609102048058bc1a14c224df1672021141b2a877b5d40d66fc01e7abaa170a066ec62194260e0f4

              Download Submit