Overview

overview

6

Static

static

1

CHINA-APT-.../dlump

ubuntu-18.04-amd64

CHINA-APT-.../dlump

debian-9-armhf

CHINA-APT-.../dlump

debian-9-mips

CHINA-APT-.../dlump

debian-9-mipsel

CHINA-APT-...l1/ccc

ubuntu-22.04-amd64

1

CHINA-APT-...l1/kde

ubuntu-22.04-amd64

6

CHINA-APT-.../udevd

ubuntu-24.04-amd64

6

CHINA-APT-...ile.sh

ubuntu-18.04-amd64

CHINA-APT-...ile.sh

debian-9-armhf

CHINA-APT-...ile.sh

debian-9-mips

CHINA-APT-...ile.sh

debian-9-mipsel

CHINA-APT-...p/a.js

windows7-x64

3

CHINA-APT-...p/a.js

windows10-2004-x64

3

CHINA-APT-...yy1.js

windows7-x64

3

CHINA-APT-...yy1.js

windows10-2004-x64

3

CHINA-APT-...gin.js

windows7-x64

3

CHINA-APT-...gin.js

windows10-2004-x64

3

CHINA-APT-...l1/kde

ubuntu-24.04-amd64

6

CHINA-APT-.../udevd

ubuntu-24.04-amd64

6

CHINA-APT-...nux.so

ubuntu-22.04-amd64

1

CHINA-APT-...m/dbus

ubuntu-24.04-amd64

6

Analysis

  • max time kernel
    1s
  • max time network
    131s
  • platform
    ubuntu-24.04_amd64
  • resource
    ubuntu2404-amd64-20240523-en
  • resource tags

    arch:amd64arch:i386image:ubuntu2404-amd64-20240523-enkernel:6.8.0-31-genericlocale:en-usos:ubuntu-24.04-amd64system
  • submitted
    21-11-2024 12:22

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    CHINA-APT-Trojan/usr/bin/.Xl1/kde

  • Size

    123KB

  • MD5

    87e437cf74ce4b1330b8af9ff71edae2

  • SHA1

    8532eca04c0f58172d80d8a446ae33907d509377

  • SHA256

    1ec286f2194199206e4ce345f1bf322b6b0b4c947b1cf32db59cca2d89370738

  • SHA512

    856a3140d54ec86f8cdac4b35f7a2266c800f75cbbcf075650e75fbc6e5f4e104c231aafecd8658a061439395a1131a5e2f075e1051550117fed6c3db8eb1446

  • SSDEEP

    3072:oKV6YwUaoJwfg+uKsdzUNtklICvOqAXby0:oKwYwUaEwfY+kI3Xu0

Score
6/10
persistence

Malware Config

Signatures

  • Write file to user bin folder 1 IoCs
    persistence

Processes

  • /tmp/CHINA-APT-Trojan/usr/bin/.Xl1/kde
    /tmp/CHINA-APT-Trojan/usr/bin/.Xl1/kde
    1⤵
    • Write file to user bin folder
    PID:2517

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads