Overview

overview

7

Static

static

3

gradle/wra...er.jar

windows7-x64

1

gradle/wra...er.jar

windows10-2004-x64

1

gradlew

ubuntu-18.04-amd64

1

gradlew

debian-9-armhf

1

gradlew

debian-9-mips

1

gradlew

debian-9-mipsel

1

gradlew.bat

windows7-x64

1

gradlew.bat

windows10-2004-x64

7

launcher/s...re.ps1

windows7-x64

3

launcher/s...re.ps1

windows10-2004-x64

3

launcher/s...t.html

windows7-x64

3

launcher/s...t.html

windows10-2004-x64

3

packages/a...r.bash

ubuntu-18.04-amd64

1

packages/a...r.bash

debian-9-armhf

1

packages/a...r.bash

debian-9-mips

1

packages/a...r.bash

debian-9-mipsel

1

packages/d...iff.sh

ubuntu-18.04-amd64

1

packages/d...iff.sh

debian-9-armhf

1

packages/d...iff.sh

debian-9-mips

1

packages/d...iff.sh

debian-9-mipsel

1

packages/d...cOS/TL

macos-10.15-amd64

1

packages/d...art.sh

ubuntu-18.04-amd64

3

packages/d...art.sh

debian-9-armhf

3

packages/d...art.sh

debian-9-mips

3

packages/d...art.sh

debian-9-mipsel

3

packages/d...ate.sh

ubuntu-18.04-amd64

6

packages/d...ate.sh

debian-9-armhf

6

packages/d...ate.sh

debian-9-mips

6

packages/d...ate.sh

debian-9-mipsel

6

packages/d...loy.sh

ubuntu-18.04-amd64

3

packages/d...loy.sh

debian-9-armhf

3

packages/d...loy.sh

debian-9-mips

3

Analysis

  • max time kernel
    4s
  • platform
    debian-9_mipsel
  • resource
    debian9-mipsel-20240611-en
  • resource tags

    arch:mipselimage:debian9-mipsel-20240611-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipselsystem
  • submitted
    12-10-2024 09:52

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    packages/dmg/contents/textual/app/restart.sh

  • Size

    106B

  • MD5

    6bd2c8317c4b82408bb3cc708463afe5

  • SHA1

    47dc00a515774ed0e14c75612de4708ef0052607

  • SHA256

    91b01da7d799ee09c9aadc0850e07e392436f0a7181ebf832db3e21e3b0e0d0f

  • SHA512

    3a9b314a4877ab447cb8cb5358db405e5f3767a3076ff6189e024f09d7419d906e5faa7bd1fbe365a729df5540e183dd9d7c7d3a92d3340deb605b9eb812cac2

Score
3/10
discovery

Malware Config

Signatures

  • Reads runtime system information 1 IoCs

    Reads data from /proc virtual filesystem.

    discovery

Processes

  • /tmp/packages/dmg/contents/textual/app/restart.sh
    /tmp/packages/dmg/contents/textual/app/restart.sh
    1⤵
      PID:732
      • /bin/sleep
        sleep 2
        2⤵
          PID:733
        • /bin/open
          open
          2⤵
          • Reads runtime system information
          PID:737

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads