Overview
overview
6Static
static
1etc/init.d/dlump
ubuntu-18.04-amd64
etc/init.d/dlump
debian-9-armhf
etc/init.d/dlump
debian-9-mips
etc/init.d/dlump
debian-9-mipsel
etc/rc.d/r...0dlump
ubuntu-18.04-amd64
etc/rc.d/r...0dlump
debian-9-armhf
etc/rc.d/r...0dlump
debian-9-mips
etc/rc.d/r...0dlump
debian-9-mipsel
etc/rc.d/r...0dlump
ubuntu-18.04-amd64
etc/rc.d/r...0dlump
debian-9-armhf
etc/rc.d/r...0dlump
debian-9-mips
etc/rc.d/r...0dlump
debian-9-mipsel
etc/rc.d/r...0dlump
ubuntu-18.04-amd64
etc/rc.d/r...0dlump
debian-9-armhf
etc/rc.d/r...0dlump
debian-9-mips
etc/rc.d/r...0dlump
debian-9-mipsel
etc/rc.d/r...0dlump
ubuntu-18.04-amd64
etc/rc.d/r...0dlump
debian-9-armhf
etc/rc.d/r...0dlump
debian-9-mips
etc/rc.d/r...0dlump
debian-9-mipsel
etc/rc.d/r...0dlump
ubuntu-18.04-amd64
etc/rc.d/r...0dlump
debian-9-armhf
etc/rc.d/r...0dlump
debian-9-mips
etc/rc.d/r...0dlump
debian-9-mipsel
home/www/.Xl1/ccc
ubuntu-22.04-amd64
1home/www/.Xl1/kde
ubuntu-24.04-amd64
6home/www/.Xl1/udevd
ubuntu-20.04-amd64
6home/www/.profile.sh
ubuntu-18.04-amd64
home/www/.profile.sh
debian-9-armhf
home/www/.profile.sh
debian-9-mips
home/www/.profile.sh
debian-9-mipsel
home/www/t...p/a.js
windows7-x64
3Analysis
-
max time kernel
1s -
max time network
132s -
platform
ubuntu-24.04_amd64 -
resource
ubuntu2404-amd64-20240523-en -
resource tags
arch:amd64arch:i386image:ubuntu2404-amd64-20240523-enkernel:6.8.0-31-genericlocale:en-usos:ubuntu-24.04-amd64system -
submitted
21-11-2024 12:22
Static task
static1
Behavioral task
behavioral1
Sample
etc/init.d/dlump
Resource
ubuntu1804-amd64-20240611-en
ubuntu-18.04-amd64
Behavioral task
behavioral2
Sample
etc/init.d/dlump
Resource
debian9-armhf-20240611-en
debian-9-armhf
Behavioral task
behavioral3
Sample
etc/init.d/dlump
Resource
debian9-mipsbe-20240418-en
debian-9-mips
Behavioral task
behavioral4
Sample
etc/init.d/dlump
Resource
debian9-mipsel-20240729-en
debian-9-mipsel
Behavioral task
behavioral5
Sample
etc/rc.d/rc1.d/S60dlump
Resource
ubuntu1804-amd64-20240508-en
ubuntu-18.04-amd64
Behavioral task
behavioral6
Sample
etc/rc.d/rc1.d/S60dlump
Resource
debian9-armhf-20240729-en
debian-9-armhf
Behavioral task
behavioral7
Sample
etc/rc.d/rc1.d/S60dlump
Resource
debian9-mipsbe-20240611-en
debian-9-mips
Behavioral task
behavioral8
Sample
etc/rc.d/rc1.d/S60dlump
Resource
debian9-mipsel-20240226-en
debian-9-mipsel
Behavioral task
behavioral9
Sample
etc/rc.d/rc2.d/S60dlump
Resource
ubuntu1804-amd64-20240611-en
ubuntu-18.04-amd64
Behavioral task
behavioral10
Sample
etc/rc.d/rc2.d/S60dlump
Resource
debian9-armhf-20240418-en
debian-9-armhf
Behavioral task
behavioral11
Sample
etc/rc.d/rc2.d/S60dlump
Resource
debian9-mipsbe-20240729-en
debian-9-mips
Behavioral task
behavioral12
Sample
etc/rc.d/rc2.d/S60dlump
Resource
debian9-mipsel-20240226-en
debian-9-mipsel
Behavioral task
behavioral13
Sample
etc/rc.d/rc3.d/S60dlump
Resource
ubuntu1804-amd64-20240729-en
ubuntu-18.04-amd64
Behavioral task
behavioral14
Sample
etc/rc.d/rc3.d/S60dlump
Resource
debian9-armhf-20240418-en
debian-9-armhf
Behavioral task
behavioral15
Sample
etc/rc.d/rc3.d/S60dlump
Resource
debian9-mipsbe-20240611-en
debian-9-mips
Behavioral task
behavioral16
Sample
etc/rc.d/rc3.d/S60dlump
Resource
debian9-mipsel-20240226-en
debian-9-mipsel
Behavioral task
behavioral17
Sample
etc/rc.d/rc4.d/S60dlump
Resource
ubuntu1804-amd64-20240508-en
ubuntu-18.04-amd64
Behavioral task
behavioral18
Sample
etc/rc.d/rc4.d/S60dlump
Resource
debian9-armhf-20240611-en
debian-9-armhf
Behavioral task
behavioral19
Sample
etc/rc.d/rc4.d/S60dlump
Resource
debian9-mipsbe-20240729-en
debian-9-mips
Behavioral task
behavioral20
Sample
etc/rc.d/rc4.d/S60dlump
Resource
debian9-mipsel-20240226-en
debian-9-mipsel
Behavioral task
behavioral21
Sample
etc/rc.d/rc5.d/S60dlump
Resource
ubuntu1804-amd64-20240611-en
ubuntu-18.04-amd64
Behavioral task
behavioral22
Sample
etc/rc.d/rc5.d/S60dlump
Resource
debian9-armhf-20240418-en
debian-9-armhf
Behavioral task
behavioral23
Sample
etc/rc.d/rc5.d/S60dlump
Resource
debian9-mipsbe-20240729-en
debian-9-mips
Behavioral task
behavioral24
Sample
etc/rc.d/rc5.d/S60dlump
Resource
debian9-mipsel-20240729-en
debian-9-mipsel
Behavioral task
behavioral25
Sample
home/www/.Xl1/ccc
Resource
ubuntu2204-amd64-20240611-en
ubuntu-22.04-amd64
Behavioral task
behavioral26
Sample
home/www/.Xl1/kde
Resource
ubuntu2404-amd64-20240523-en
ubuntu-24.04-amd64
Behavioral task
behavioral27
Sample
home/www/.Xl1/udevd
Resource
ubuntu2004-amd64-20240611-en
ubuntu-20.04-amd64
Behavioral task
behavioral28
Sample
home/www/.profile.sh
Resource
ubuntu1804-amd64-20240508-en
ubuntu-18.04-amd64
Behavioral task
behavioral29
Sample
home/www/.profile.sh
Resource
debian9-armhf-20240611-en
debian-9-armhf
Behavioral task
behavioral30
Sample
home/www/.profile.sh
Resource
debian9-mipsbe-20240729-en
debian-9-mips
Behavioral task
behavioral31
Sample
home/www/.profile.sh
Resource
debian9-mipsel-20240729-en
debian-9-mipsel
Behavioral task
behavioral32
Sample
home/www/tomcat/webapps/WEB-INF/attache_temp/a.js
Resource
win7-20240903-en
windows7-x64
General
-
Target
home/www/.Xl1/kde
-
Size
123KB
-
MD5
87e437cf74ce4b1330b8af9ff71edae2
-
SHA1
8532eca04c0f58172d80d8a446ae33907d509377
-
SHA256
1ec286f2194199206e4ce345f1bf322b6b0b4c947b1cf32db59cca2d89370738
-
SHA512
856a3140d54ec86f8cdac4b35f7a2266c800f75cbbcf075650e75fbc6e5f4e104c231aafecd8658a061439395a1131a5e2f075e1051550117fed6c3db8eb1446
-
SSDEEP
3072:oKV6YwUaoJwfg+uKsdzUNtklICvOqAXby0:oKwYwUaEwfY+kI3Xu0
Malware Config
Signatures
-
Write file to user bin folder 1 IoCs
description ioc Process File opened for modification /usr/bin/.Xl1/run kde