Overview
overview
7Static
static
3c2-3.4.0_amd64_darwin
macos-10.15-amd64
1c2-3.4.0_amd64_linux
ubuntu-24.04-amd64
7c2-3.4.0_a...ws.exe
windows7-x64
1c2-3.4.0_a...ws.exe
windows10-2004-x64
1c2-3.4.0_arm64_darwin
macos-10.15-amd64
1c2-3.4.0_armv5_linux
debian-9-armhf
7c2-3.4.0_armv6_linux
debian-12-armhf
7c2-3.4.0_armv7_linux
debian-12-armhf
7c2-3.4.0_armv8_linux
ubuntu-18.04-amd64
c2-3.4.0_armv8_linux
debian-9-armhf
c2-3.4.0_armv8_linux
debian-9-mips
c2-3.4.0_armv8_linux
debian-9-mipsel
c2-3.4.0_i386_linux
ubuntu-24.04-amd64
7c2-3.4.0_i...ws.exe
windows7-x64
3c2-3.4.0_i...ws.exe
windows10-2004-x64
3Analysis
-
max time kernel
0s -
max time network
130s -
platform
ubuntu-24.04_amd64 -
resource
ubuntu2404-amd64-20240523-en -
resource tags
arch:amd64arch:i386image:ubuntu2404-amd64-20240523-enkernel:6.8.0-31-genericlocale:en-usos:ubuntu-24.04-amd64system -
submitted
19-11-2024 18:04
Static task
static1
Behavioral task
behavioral1
Sample
c2-3.4.0_amd64_darwin
Resource
macos-20241106-en
Behavioral task
behavioral2
Sample
c2-3.4.0_amd64_linux
Resource
ubuntu2404-amd64-20240523-en
Behavioral task
behavioral3
Sample
c2-3.4.0_amd64_windows.exe
Resource
win7-20241010-en
Behavioral task
behavioral4
Sample
c2-3.4.0_amd64_windows.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral5
Sample
c2-3.4.0_arm64_darwin
Resource
macos-20241101-en
Behavioral task
behavioral6
Sample
c2-3.4.0_armv5_linux
Resource
debian9-armhf-20240418-en
Behavioral task
behavioral7
Sample
c2-3.4.0_armv6_linux
Resource
debian12-armhf-20240221-en
Behavioral task
behavioral8
Sample
c2-3.4.0_armv7_linux
Resource
debian12-armhf-20240221-en
Behavioral task
behavioral9
Sample
c2-3.4.0_armv8_linux
Resource
ubuntu1804-amd64-20240611-en
Behavioral task
behavioral10
Sample
c2-3.4.0_armv8_linux
Resource
debian9-armhf-20240729-en
Behavioral task
behavioral11
Sample
c2-3.4.0_armv8_linux
Resource
debian9-mipsbe-20240611-en
Behavioral task
behavioral12
Sample
c2-3.4.0_armv8_linux
Resource
debian9-mipsel-20240611-en
Behavioral task
behavioral13
Sample
c2-3.4.0_i386_linux
Resource
ubuntu2404-amd64-20240523-en
Behavioral task
behavioral14
Sample
c2-3.4.0_i386_windows.exe
Resource
win7-20240903-en
Behavioral task
behavioral15
Sample
c2-3.4.0_i386_windows.exe
Resource
win10v2004-20241007-en
General
-
Target
c2-3.4.0_i386_linux
-
Size
11.8MB
-
MD5
6c2aae6c310cb0b4c53191a7c6538cb8
-
SHA1
7d043f49a5362fa4829a8672e643e6eaff23167e
-
SHA256
5027474f59bb0dd2c2fcee52a0b689bd3d17068dce81fbbceffa1f52fb732223
-
SHA512
cf9d3314c2d0ccab315e173ff0c9c9228ca7f7a2b8cbac5b91b0a2f4dc9175b4cca16449f06d9b2028e47d9532133bd409a25dc5d94d44bbac77c70c34283665
-
SSDEEP
98304:Cgcmtf1Hm+KvtOfrzv0CDP1DFwS5m4O9m5glnDoyD5oT:CTyw+VtDP1pw+VOPNiT
Malware Config
Signatures
-
Loads a kernel module 64 IoCs
Loads a Linux kernel module, potentially to achieve persistence
Processes:
c2-3.4.0_i386_linuxpid Process 2441 c2-3.4.0_i386_linux 2441 c2-3.4.0_i386_linux 2441 c2-3.4.0_i386_linux 2441 c2-3.4.0_i386_linux 2441 c2-3.4.0_i386_linux 2443 c2-3.4.0_i386_linux 2441 c2-3.4.0_i386_linux 2444 c2-3.4.0_i386_linux 2441 c2-3.4.0_i386_linux 2441 c2-3.4.0_i386_linux 2441 c2-3.4.0_i386_linux 2445 c2-3.4.0_i386_linux 2441 c2-3.4.0_i386_linux 2441 c2-3.4.0_i386_linux 2441 c2-3.4.0_i386_linux 2441 c2-3.4.0_i386_linux 2441 c2-3.4.0_i386_linux 2441 c2-3.4.0_i386_linux 2441 c2-3.4.0_i386_linux 2441 c2-3.4.0_i386_linux 2441 c2-3.4.0_i386_linux 2441 c2-3.4.0_i386_linux 2441 c2-3.4.0_i386_linux 2441 c2-3.4.0_i386_linux 2441 c2-3.4.0_i386_linux 2441 c2-3.4.0_i386_linux 2441 c2-3.4.0_i386_linux 2441 c2-3.4.0_i386_linux 2441 c2-3.4.0_i386_linux 2441 c2-3.4.0_i386_linux 2441 c2-3.4.0_i386_linux 2441 c2-3.4.0_i386_linux 2441 c2-3.4.0_i386_linux 2441 c2-3.4.0_i386_linux 2441 c2-3.4.0_i386_linux 2441 c2-3.4.0_i386_linux 2441 c2-3.4.0_i386_linux 2441 c2-3.4.0_i386_linux 2441 c2-3.4.0_i386_linux 2441 c2-3.4.0_i386_linux 2441 c2-3.4.0_i386_linux 2441 c2-3.4.0_i386_linux 2441 c2-3.4.0_i386_linux 2441 c2-3.4.0_i386_linux 2441 c2-3.4.0_i386_linux 2441 c2-3.4.0_i386_linux 2441 c2-3.4.0_i386_linux 2441 c2-3.4.0_i386_linux 2441 c2-3.4.0_i386_linux 2441 c2-3.4.0_i386_linux 2441 c2-3.4.0_i386_linux 2441 c2-3.4.0_i386_linux 2441 c2-3.4.0_i386_linux 2441 c2-3.4.0_i386_linux 2441 c2-3.4.0_i386_linux 2441 c2-3.4.0_i386_linux 2441 c2-3.4.0_i386_linux 2441 c2-3.4.0_i386_linux 2441 c2-3.4.0_i386_linux 2441 c2-3.4.0_i386_linux 2441 c2-3.4.0_i386_linux 2441 c2-3.4.0_i386_linux 2441 c2-3.4.0_i386_linux 2444 c2-3.4.0_i386_linux