Overview
overview
10Static
static
5.systemd/.i686
ubuntu-22.04-amd64
3.systemd/.run
ubuntu-18.04-amd64
7.systemd/.run
debian-9-armhf
6.systemd/.run
debian-9-mips
6.systemd/.run
debian-9-mipsel
6.systemd/.x86_64
ubuntu-24.04-amd64
10.systemd/auto
ubuntu-18.04-amd64
7.systemd/auto
debian-9-armhf
7.systemd/auto
debian-9-mips
7.systemd/auto
debian-9-mipsel
7.systemd/clean
ubuntu-18.04-amd64
1.systemd/clean
debian-9-armhf
1.systemd/clean
debian-9-mips
1.systemd/clean
debian-9-mipsel
1.systemd/go
ubuntu-18.04-amd64
1.systemd/go
debian-9-armhf
1.systemd/go
debian-9-mips
1.systemd/go
debian-9-mipsel
1.systemd/ntpdate
ubuntu-18.04-amd64
7.systemd/ntpdate
debian-9-armhf
7.systemd/ntpdate
debian-9-mips
7.systemd/ntpdate
debian-9-mipsel
7.update/.i686
ubuntu-20.04-amd64
6.update/.run
ubuntu-18.04-amd64
3.update/.run
debian-9-armhf
3.update/.run
debian-9-mips
3.update/.run
debian-9-mipsel
3.update/.x86_64
ubuntu-22.04-amd64
10.update/auth
ubuntu-18.04-amd64
8.update/auth
debian-9-armhf
8.update/auth
debian-9-mips
8.update/auth
debian-9-mipsel
8Analysis
-
max time kernel
0s -
platform
debian-9_mipsel -
resource
debian9-mipsel-20240611-en -
resource tags
arch:mipselimage:debian9-mipsel-20240611-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipselsystem -
submitted
08-11-2024 11:36
Behavioral task
behavioral1
Sample
.systemd/.i686
Resource
ubuntu2204-amd64-20240611-en
Behavioral task
behavioral2
Sample
.systemd/.run
Resource
ubuntu1804-amd64-20240508-en
Behavioral task
behavioral3
Sample
.systemd/.run
Resource
debian9-armhf-20240611-en
Behavioral task
behavioral4
Sample
.systemd/.run
Resource
debian9-mipsbe-20240729-en
Behavioral task
behavioral5
Sample
.systemd/.run
Resource
debian9-mipsel-20240611-en
Behavioral task
behavioral6
Sample
.systemd/.x86_64
Resource
ubuntu2404-amd64-20240523-en
Behavioral task
behavioral7
Sample
.systemd/auto
Resource
ubuntu1804-amd64-20240508-en
Behavioral task
behavioral8
Sample
.systemd/auto
Resource
debian9-armhf-20240611-en
Behavioral task
behavioral9
Sample
.systemd/auto
Resource
debian9-mipsbe-20240729-en
Behavioral task
behavioral10
Sample
.systemd/auto
Resource
debian9-mipsel-20240611-en
Behavioral task
behavioral11
Sample
.systemd/clean
Resource
ubuntu1804-amd64-20240611-en
Behavioral task
behavioral12
Sample
.systemd/clean
Resource
debian9-armhf-20240418-en
Behavioral task
behavioral13
Sample
.systemd/clean
Resource
debian9-mipsbe-20240611-en
Behavioral task
behavioral14
Sample
.systemd/clean
Resource
debian9-mipsel-20240611-en
Behavioral task
behavioral15
Sample
.systemd/go
Resource
ubuntu1804-amd64-20240729-en
Behavioral task
behavioral16
Sample
.systemd/go
Resource
debian9-armhf-20240611-en
Behavioral task
behavioral17
Sample
.systemd/go
Resource
debian9-mipsbe-20240729-en
Behavioral task
behavioral18
Sample
.systemd/go
Resource
debian9-mipsel-20240418-en
Behavioral task
behavioral19
Sample
.systemd/ntpdate
Resource
ubuntu1804-amd64-20240611-en
Behavioral task
behavioral20
Sample
.systemd/ntpdate
Resource
debian9-armhf-20240611-en
Behavioral task
behavioral21
Sample
.systemd/ntpdate
Resource
debian9-mipsbe-20240611-en
Behavioral task
behavioral22
Sample
.systemd/ntpdate
Resource
debian9-mipsel-20240418-en
Behavioral task
behavioral23
Sample
.update/.i686
Resource
ubuntu2004-amd64-20240611-en
Behavioral task
behavioral24
Sample
.update/.run
Resource
ubuntu1804-amd64-20240611-en
Behavioral task
behavioral25
Sample
.update/.run
Resource
debian9-armhf-20240729-en
Behavioral task
behavioral26
Sample
.update/.run
Resource
debian9-mipsbe-20240729-en
Behavioral task
behavioral27
Sample
.update/.run
Resource
debian9-mipsel-20240611-en
Behavioral task
behavioral28
Sample
.update/.x86_64
Resource
ubuntu2204-amd64-20240611-en
Behavioral task
behavioral29
Sample
.update/auth
Resource
ubuntu1804-amd64-20240508-en
Behavioral task
behavioral30
Sample
.update/auth
Resource
debian9-armhf-20240611-en
Behavioral task
behavioral31
Sample
.update/auth
Resource
debian9-mipsbe-20240611-en
Behavioral task
behavioral32
Sample
.update/auth
Resource
debian9-mipsel-20240729-en
General
-
Target
.update/.run
-
Size
485B
-
MD5
279171e9a52627c005d882b4c31f0158
-
SHA1
419d14ecd9ba9b819219db32624e7d6244b36d3e
-
SHA256
4257bc327cf5312bb7b76154c0d3c31a8845288955611dfc937b75cb86073fb7
-
SHA512
a7d4cda901507e9327e92450386032fe678e9a3e281a3e4139c3f3e109e15ac10de9aeb1a6eb976b45f2aa4f0ea3d60a5ef4376fd82cba7795c9eeab5162c665
Malware Config
Signatures
-
Writes file to tmp directory 2 IoCs
Malware often drops required files in the /tmp directory.
Processes:
.rundescription ioc process File opened for modification /tmp/.update/update.dir .run File opened for modification /tmp/.update/.update .run
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
114B
MD5a0669fc7ed6e6c80a991b070e1f7909a
SHA1313f4f3deaf4237a8d0059593f1a68d7b7cc434f
SHA256808530d3d871a0ae2d88b92e3820c8dbdd9b9a1ab469d4ed0088dce65b96545b
SHA5122963bbba5c52178b3732139352144c8b34a81561ada3b803f50fdd51401017dc762fbdaed483e24da56b59d04381c8122b912c31d624a13d19ddfe951a55ec1f
-
Filesize
13B
MD5f162d09e078b8201089b7e20ea72f2bf
SHA1f7da8700cd21e201f62a17992d2ac15c09c447a1
SHA2562162d6f6fadf44bb1db38ea55ec80a7006c269061de5141bf9f4743ec9cd95fb
SHA512adb0481faeeb35926c8ba2bf2549e7b43dc40864ebfb8c40274d5021dfc3d87a8c2c2aa2996a28068c061ae13c404e85e870a23a67a709b4522134ce2be221cb