Overview

overview

6

Static

static

1

CHINA-APT-.../dlump

ubuntu-18.04-amd64

CHINA-APT-.../dlump

debian-9-armhf

CHINA-APT-.../dlump

debian-9-mips

CHINA-APT-.../dlump

debian-9-mipsel

CHINA-APT-...l1/ccc

ubuntu-22.04-amd64

1

CHINA-APT-...l1/kde

ubuntu-22.04-amd64

6

CHINA-APT-.../udevd

ubuntu-24.04-amd64

6

CHINA-APT-...ile.sh

ubuntu-18.04-amd64

CHINA-APT-...ile.sh

debian-9-armhf

CHINA-APT-...ile.sh

debian-9-mips

CHINA-APT-...ile.sh

debian-9-mipsel

CHINA-APT-...p/a.js

windows7-x64

3

CHINA-APT-...p/a.js

windows10-2004-x64

3

CHINA-APT-...yy1.js

windows7-x64

3

CHINA-APT-...yy1.js

windows10-2004-x64

3

CHINA-APT-...gin.js

windows7-x64

3

CHINA-APT-...gin.js

windows10-2004-x64

3

CHINA-APT-...l1/kde

ubuntu-24.04-amd64

6

CHINA-APT-.../udevd

ubuntu-24.04-amd64

6

CHINA-APT-...nux.so

ubuntu-22.04-amd64

1

CHINA-APT-...m/dbus

ubuntu-24.04-amd64

6

Analysis

  • max time kernel
    0s
  • platform
    debian-9_armhf
  • resource
    debian9-armhf-20240611-en
  • resource tags

    arch:armhfimage:debian9-armhf-20240611-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem
  • submitted
    21-11-2024 12:22

Sharing

Copy URL
Twitter E-mail

Errors

Reason
Payload did not run: elf interpreter '/bin/bash\r' not found
Report Analysis Logs

General

  • Target

    CHINA-APT-Trojan/home/www/.profile.sh

  • Size

    45B

  • MD5

    c6bc4e21447f4d69306d2aa2a4712c0f

  • SHA1

    b6ffbe6b788432215d3ce22a4f6c4a1dbe64721b

  • SHA256

    83a9d271c5d7f7bc8a1582348897674047aeb242c4457274bd241293201303be

  • SHA512

    199f63623155c91777a4a0c4c09160dddedb26b1b3c47a86e0e6a9240422ffd5dfd6babcc00b15a869e292711bf0dd9350d6b95d04b02ecebcfb1d6f9c518f45

Score
1/10

Malware Config

Signatures

Processes

  • /tmp/CHINA-APT-Trojan/home/www/.profile.sh
    /tmp/CHINA-APT-Trojan/home/www/.profile.sh
    1⤵
      PID:673

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads