Overview

overview

10

Static

static

5

.systemd/.i686

ubuntu-22.04-amd64

3

.systemd/.run

ubuntu-18.04-amd64

7

.systemd/.run

debian-9-armhf

6

.systemd/.run

debian-9-mips

6

.systemd/.run

debian-9-mipsel

6

.systemd/.x86_64

ubuntu-24.04-amd64

10

.systemd/auto

ubuntu-18.04-amd64

7

.systemd/auto

debian-9-armhf

7

.systemd/auto

debian-9-mips

7

.systemd/auto

debian-9-mipsel

7

.systemd/clean

ubuntu-18.04-amd64

1

.systemd/clean

debian-9-armhf

1

.systemd/clean

debian-9-mips

1

.systemd/clean

debian-9-mipsel

1

.systemd/go

ubuntu-18.04-amd64

1

.systemd/go

debian-9-armhf

1

.systemd/go

debian-9-mips

1

.systemd/go

debian-9-mipsel

1

.systemd/ntpdate

ubuntu-18.04-amd64

7

.systemd/ntpdate

debian-9-armhf

7

.systemd/ntpdate

debian-9-mips

7

.systemd/ntpdate

debian-9-mipsel

7

.update/.i686

ubuntu-20.04-amd64

6

.update/.run

ubuntu-18.04-amd64

3

.update/.run

debian-9-armhf

3

.update/.run

debian-9-mips

3

.update/.run

debian-9-mipsel

3

.update/.x86_64

ubuntu-22.04-amd64

10

.update/auth

ubuntu-18.04-amd64

8

.update/auth

debian-9-armhf

8

.update/auth

debian-9-mips

8

.update/auth

debian-9-mipsel

8

Analysis

  • max time kernel
    0s
  • max time network
    132s
  • platform
    ubuntu-18.04_amd64
  • resource
    ubuntu1804-amd64-20240611-en
  • resource tags

    arch:amd64arch:i386image:ubuntu1804-amd64-20240611-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system
  • submitted
    08-11-2024 11:36

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    .systemd/clean

  • Size

    306B

  • MD5

    a344627bc9286c17978b4e1391c3b820

  • SHA1

    706313eec583accdb10fb315b8a1ecc88401c211

  • SHA256

    688bee092842f0545e425685e133e1d3abfe55b42f7afaeccfec0266c461d927

  • SHA512

    14394c073ef879e9b5a2c7724a47d403d2e64b57a53f28b5f107df85681aa2ad63b777e7be4e21a9fd91d0f94d4ecf11c74b79f1332b0da81d000f0530196ca3

Score
1/10

Malware Config

Signatures

Processes

  • /tmp/.systemd/clean
    /tmp/.systemd/clean
    1⤵
      PID:1480
      • /bin/uname
        uname -m
        2⤵
          PID:1481
        • /bin/rm
          rm -rf .i686
          2⤵
            PID:1482
          • /bin/rm
            rm -rf systemd.d systemd.dir auth auto clean .run go ntpdate
            2⤵
              PID:1483
            • /bin/rm
              rm -rf /root/.bash_history
              2⤵
                PID:1484

            Network

            MITRE ATT&CK Matrix

            Replay Monitor

            Loading Replay Monitor...

            Downloads