Overview
overview
10Static
static
1048db28a1f4...c5.exe
windows7-x64
148db28a1f4...c5.exe
windows10-2004-x64
1595539b200...6e.exe
windows7-x64
7595539b200...6e.exe
windows10-2004-x64
7pkg/gems/s...tup.js
windows7-x64
3pkg/gems/s...tup.js
windows10-2004-x64
3pkg/gems/s...uby.rb
ubuntu-18.04-amd64
1pkg/gems/s...uby.rb
debian-9-armhf
1pkg/gems/s...uby.rb
debian-9-mips
1pkg/gems/s...uby.rb
debian-9-mipsel
1pkg/gems/s...uby.rb
ubuntu-18.04-amd64
1pkg/gems/s...uby.rb
debian-9-armhf
1pkg/gems/s...uby.rb
debian-9-mips
1pkg/gems/s...uby.rb
debian-9-mipsel
1pkg/gems/s...ta.vbs
windows7-x64
1pkg/gems/s...ta.vbs
windows10-2004-x64
1pkg/gems/s...nt.vbs
windows7-x64
1pkg/gems/s...nt.vbs
windows10-2004-x64
1pkg/gems/s...or.vbs
windows7-x64
1pkg/gems/s...or.vbs
windows10-2004-x64
1pkg/gems/s...ry.vbs
windows7-x64
3pkg/gems/s...ry.vbs
windows10-2004-x64
3pkg/gems/s...ry.vbs
windows7-x64
3pkg/gems/s...ry.vbs
windows10-2004-x64
3pkg/gems/s...ry.vbs
windows7-x64
3pkg/gems/s...ry.vbs
windows10-2004-x64
3pkg/gems/s...ng.ps1
windows7-x64
3pkg/gems/s...ng.ps1
windows10-2004-x64
3pkg/gems/s...ry.vbs
windows7-x64
3pkg/gems/s...ry.vbs
windows10-2004-x64
3pkg/gems/s...ry.vbs
windows7-x64
3pkg/gems/s...ry.vbs
windows10-2004-x64
3Analysis
-
max time kernel
0s -
max time network
107s -
platform
debian-9_armhf -
resource
debian9-armhf-20240418-en -
resource tags
arch:armhfimage:debian9-armhf-20240418-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem -
submitted
12-11-2024 06:21
Behavioral task
behavioral1
Sample
48db28a1f4bd01050aa13f021c3b1dfd7aa7ed807592e0a23f3c7afbb7db78c5.exe
Resource
win7-20241023-en
Behavioral task
behavioral2
Sample
48db28a1f4bd01050aa13f021c3b1dfd7aa7ed807592e0a23f3c7afbb7db78c5.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral3
Sample
595539b2009fdf8e53a409f7a21b779e7a670ca61f0a8dc216b226d753a54e6e.exe
Resource
win7-20240729-en
Behavioral task
behavioral4
Sample
595539b2009fdf8e53a409f7a21b779e7a670ca61f0a8dc216b226d753a54e6e.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral5
Sample
pkg/gems/snmp-1.0.2/setup.js
Resource
win7-20240903-en
Behavioral task
behavioral6
Sample
pkg/gems/snmp-1.0.2/setup.js
Resource
win10v2004-20241007-en
Behavioral task
behavioral7
Sample
pkg/gems/soap4r-1.5.8/bin/wsdl2ruby.rb
Resource
ubuntu1804-amd64-20240611-en
Behavioral task
behavioral8
Sample
pkg/gems/soap4r-1.5.8/bin/wsdl2ruby.rb
Resource
debian9-armhf-20240418-en
Behavioral task
behavioral9
Sample
pkg/gems/soap4r-1.5.8/bin/wsdl2ruby.rb
Resource
debian9-mipsbe-20240611-en
Behavioral task
behavioral10
Sample
pkg/gems/soap4r-1.5.8/bin/wsdl2ruby.rb
Resource
debian9-mipsel-20240611-en
Behavioral task
behavioral11
Sample
pkg/gems/soap4r-1.5.8/bin/xsd2ruby.rb
Resource
ubuntu1804-amd64-20240508-en
Behavioral task
behavioral12
Sample
pkg/gems/soap4r-1.5.8/bin/xsd2ruby.rb
Resource
debian9-armhf-20240611-en
Behavioral task
behavioral13
Sample
pkg/gems/soap4r-1.5.8/bin/xsd2ruby.rb
Resource
debian9-mipsbe-20240729-en
Behavioral task
behavioral14
Sample
pkg/gems/soap4r-1.5.8/bin/xsd2ruby.rb
Resource
debian9-mipsel-20240226-en
Behavioral task
behavioral15
Sample
pkg/gems/soap4r-1.5.8/lib/soap/baseData.vbs
Resource
win7-20240903-en
Behavioral task
behavioral16
Sample
pkg/gems/soap4r-1.5.8/lib/soap/baseData.vbs
Resource
win10v2004-20241007-en
Behavioral task
behavioral17
Sample
pkg/gems/soap4r-1.5.8/lib/soap/element.vbs
Resource
win7-20240903-en
Behavioral task
behavioral18
Sample
pkg/gems/soap4r-1.5.8/lib/soap/element.vbs
Resource
win10v2004-20241007-en
Behavioral task
behavioral19
Sample
pkg/gems/soap4r-1.5.8/lib/soap/generator.vbs
Resource
win7-20240903-en
Behavioral task
behavioral20
Sample
pkg/gems/soap4r-1.5.8/lib/soap/generator.vbs
Resource
win10v2004-20241007-en
Behavioral task
behavioral21
Sample
pkg/gems/soap4r-1.5.8/lib/soap/mapping/encodedregistry.vbs
Resource
win7-20240903-en
Behavioral task
behavioral22
Sample
pkg/gems/soap4r-1.5.8/lib/soap/mapping/encodedregistry.vbs
Resource
win10v2004-20241007-en
Behavioral task
behavioral23
Sample
pkg/gems/soap4r-1.5.8/lib/soap/mapping/factory.vbs
Resource
win7-20240903-en
Behavioral task
behavioral24
Sample
pkg/gems/soap4r-1.5.8/lib/soap/mapping/factory.vbs
Resource
win10v2004-20241007-en
Behavioral task
behavioral25
Sample
pkg/gems/soap4r-1.5.8/lib/soap/mapping/literalregistry.vbs
Resource
win7-20240903-en
Behavioral task
behavioral26
Sample
pkg/gems/soap4r-1.5.8/lib/soap/mapping/literalregistry.vbs
Resource
win10v2004-20241007-en
Behavioral task
behavioral27
Sample
pkg/gems/soap4r-1.5.8/lib/soap/mapping/mapping.ps1
Resource
win7-20240903-en
Behavioral task
behavioral28
Sample
pkg/gems/soap4r-1.5.8/lib/soap/mapping/mapping.ps1
Resource
win10v2004-20241007-en
Behavioral task
behavioral29
Sample
pkg/gems/soap4r-1.5.8/lib/soap/mapping/wsdlencodedregistry.vbs
Resource
win7-20241010-en
Behavioral task
behavioral30
Sample
pkg/gems/soap4r-1.5.8/lib/soap/mapping/wsdlencodedregistry.vbs
Resource
win10v2004-20241007-en
Behavioral task
behavioral31
Sample
pkg/gems/soap4r-1.5.8/lib/soap/mapping/wsdlliteralregistry.vbs
Resource
win7-20240708-en
Behavioral task
behavioral32
Sample
pkg/gems/soap4r-1.5.8/lib/soap/mapping/wsdlliteralregistry.vbs
Resource
win10v2004-20241007-en
General
-
Target
pkg/gems/soap4r-1.5.8/bin/wsdl2ruby.rb
-
Size
3KB
-
MD5
24b4534b1bb985f3b33719e45bcbff23
-
SHA1
02d7c31d4eff0ecc83c5022ebe08a8f7e7556cae
-
SHA256
8b127b926ad03e0e2a6e60add688cab08a82a44ae77848d858dc3f36eaf10b5b
-
SHA512
47ff37dd8878d67b9775e6d0275bd700990a9f8fb742fab633b854da98c4d1cbae6a6875ec960ce0683c5e0ae20ee6db50b0d87d225a3ce990b2d58954da856a
Malware Config
Signatures
Processes
-
/tmp/pkg/gems/soap4r-1.5.8/bin/wsdl2ruby.rb/tmp/pkg/gems/soap4r-1.5.8/bin/wsdl2ruby.rb1⤵PID:746
-
/usr/local/sbin/rubyruby /tmp/pkg/gems/soap4r-1.5.8/bin/wsdl2ruby.rb1⤵PID:746
-
/usr/local/bin/rubyruby /tmp/pkg/gems/soap4r-1.5.8/bin/wsdl2ruby.rb1⤵PID:746
-
/usr/sbin/rubyruby /tmp/pkg/gems/soap4r-1.5.8/bin/wsdl2ruby.rb1⤵PID:746
-
/usr/bin/rubyruby /tmp/pkg/gems/soap4r-1.5.8/bin/wsdl2ruby.rb1⤵PID:746
-
/sbin/rubyruby /tmp/pkg/gems/soap4r-1.5.8/bin/wsdl2ruby.rb1⤵PID:746
-
/bin/rubyruby /tmp/pkg/gems/soap4r-1.5.8/bin/wsdl2ruby.rb1⤵PID:746