363110d3ff2611c9011f3f537f5887234d60f5f6090be45771f47a075f63b66f

Analysis

max time kernel
8s
platform
debian-9_mips
resource
debian9-mipsbe-20240611-en
resource tags

arch:mipsimage:debian9-mipsbe-20240611-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipssystem
submitted
25-10-2024 12:55

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

doenerium-main/sigthief.py
Size

10KB
MD5

22b126ffe23c248432f4a0ee56c0f771
SHA1

3d7ef61d3af17e3f784b0a85c3af52147015d714
SHA256

6458fa3d473548cfde5ea5e7bb4acb4558d087331d45764256ceeddda93531dd
SHA512

fcec61053354a5d3afaae6f1d418fe691d546175b4aa82350096e5369f78e05078591c97f74bf054351dbbafb2cca2ebd1602b41f1e56a4fc1be74e135dc80b9
SSDEEP

192:Juj5U9+6E0yWYSF/DwI6CRgRIah/gSSU15AkAJi:JvyMvRtU1D

Score

3^/10

execution

Malware Config

Signatures

Command and Scripting Interpreter: Python 1 TTPs 4 IoCs

Execution via Python.

execution

Python

T1059.006

pid	Process
724	python3
724	python3
724	python3
724	python3

/tmp/doenerium-main/sigthief.py
/tmp/doenerium-main/sigthief.py
1⤵
PID:724

/usr/local/sbin/python3
python3 /tmp/doenerium-main/sigthief.py
1⤵
- Command and Scripting Interpreter: Python
PID:724

/usr/local/bin/python3
python3 /tmp/doenerium-main/sigthief.py
1⤵
- Command and Scripting Interpreter: Python
PID:724

/usr/sbin/python3
python3 /tmp/doenerium-main/sigthief.py
1⤵
- Command and Scripting Interpreter: Python
PID:724

/usr/bin/python3
python3 /tmp/doenerium-main/sigthief.py
1⤵
- Command and Scripting Interpreter: Python
PID:724

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Python

T1059.006

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads