Overview

overview

10

Static

static

10

XWorm-5.6/...sample

ubuntu-18.04-amd64

1

XWorm-5.6/...sample

debian-9-armhf

1

XWorm-5.6/...sample

debian-9-mips

1

XWorm-5.6/...sample

debian-9-mipsel

1

XWorm-5.6/...sample

ubuntu-18.04-amd64

3

XWorm-5.6/...sample

debian-9-armhf

3

XWorm-5.6/...sample

debian-9-mips

3

XWorm-5.6/...sample

debian-9-mipsel

3

XWorm-5.6/...sample

ubuntu-18.04-amd64

1

XWorm-5.6/...sample

debian-9-armhf

1

XWorm-5.6/...sample

debian-9-mips

1

XWorm-5.6/...sample

debian-9-mipsel

1

XWorm-5.6/...sample

ubuntu-18.04-amd64

1

XWorm-5.6/...sample

debian-9-armhf

1

XWorm-5.6/...sample

debian-9-mips

1

XWorm-5.6/...sample

debian-9-mipsel

1

XWorm-5.6/...sample

ubuntu-18.04-amd64

1

XWorm-5.6/...sample

debian-9-armhf

1

XWorm-5.6/...sample

debian-9-mips

1

XWorm-5.6/...sample

debian-9-mipsel

1

XWorm-5.6/...sample

ubuntu-18.04-amd64

1

XWorm-5.6/...sample

debian-9-armhf

1

XWorm-5.6/...sample

debian-9-mips

1

XWorm-5.6/...sample

debian-9-mipsel

1

XWorm-5.6/...sample

ubuntu-18.04-amd64

1

XWorm-5.6/...sample

debian-9-armhf

1

XWorm-5.6/...sample

debian-9-mips

1

XWorm-5.6/...sample

debian-9-mipsel

1

XWorm-5.6/...sample

ubuntu-18.04-amd64

1

XWorm-5.6/...sample

debian-9-armhf

1

XWorm-5.6/...sample

debian-9-mips

1

XWorm-5.6/...sample

debian-9-mipsel

1

Analysis

  • max time kernel
    1s
  • platform
    debian-9_armhf
  • resource
    debian9-armhf-20240611-en
  • resource tags

    arch:armhfimage:debian9-armhf-20240611-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem
  • submitted
    13-11-2024 10:33

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    XWorm-5.6/.git/hooks/commit-msg.sample

  • Size

    896B

  • MD5

    579a3c1e12a1e74a98169175fb913012

  • SHA1

    ee1ed5aad98a435f2020b6de35c173b75d9affac

  • SHA256

    1f74d5e9292979b573ebd59741d46cb93ff391acdd083d340b94370753d92437

  • SHA512

    d6bb7fa747f4625adf1877f546565cbe812ca7dd4168f7e9068e6732555d8737eba549546cf5946649e3f38de82d173aaf9c160a4c9f9445655258b4c5f955eb

Score
3/10
discovery

Malware Config

Signatures

  • Reads runtime system information 1 IoCs

    Reads data from /proc virtual filesystem.

    discovery

Processes

  • /tmp/XWorm-5.6/.git/hooks/commit-msg.sample
    /tmp/XWorm-5.6/.git/hooks/commit-msg.sample
    1⤵
      PID:708
      • /usr/bin/sort
        sort
        2⤵
          PID:715
        • /bin/grep
          grep "^Signed-off-by: "
          2⤵
            PID:714
          • /usr/bin/uniq
            uniq -c
            2⤵
              PID:716
            • /bin/sed
              sed -e "/^[ ]*1[ ]/d"
              2⤵
              • Reads runtime system information
              PID:717

          Network

          MITRE ATT&CK Matrix

          Replay Monitor

          Loading Replay Monitor...

          Downloads