Overview
overview
10Static
static
10SparxSolve...64.exe
windows7-x64
7SparxSolve...64.exe
windows10-2004-x64
7$PLUGINSDI...er.dll
windows7-x64
3$PLUGINSDI...er.dll
windows10-2004-x64
3$PLUGINSDI...ls.dll
windows7-x64
3$PLUGINSDI...ls.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows7-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3$PLUGINSDI...ll.dll
windows7-x64
3$PLUGINSDI...ll.dll
windows10-2004-x64
3LICENSES.c...m.html
windows7-x64
3LICENSES.c...m.html
windows10-2004-x64
3SparxMaths-Solver.exe
windows7-x64
1SparxMaths-Solver.exe
windows10-2004-x64
7d3dcompiler_47.dll
windows10-2004-x64
1ffmpeg.dll
windows7-x64
1ffmpeg.dll
windows10-2004-x64
1libEGL.dll
windows7-x64
1libEGL.dll
windows10-2004-x64
1libGLESv2.dll
windows7-x64
1libGLESv2.dll
windows10-2004-x64
1locales/uk.ps1
windows7-x64
3locales/uk.ps1
windows10-2004-x64
3resources/...ces.js
windows7-x64
3resources/...ces.js
windows10-2004-x64
3resources/...ps.exe
windows7-x64
1resources/...ps.exe
windows10-2004-x64
1resources/...ck.ps1
windows7-x64
3resources/...ck.ps1
windows10-2004-x64
3resources/...nux.sh
ubuntu-18.04-amd64
3resources/...nux.sh
debian-9-armhf
4resources/...nux.sh
debian-9-mips
3Analysis
-
max time kernel
149s -
max time network
183s -
platform
debian-9_mips -
resource
debian9-mipsbe-20240418-en -
resource tags
arch:mipsimage:debian9-mipsbe-20240418-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipssystem -
submitted
21-11-2024 18:12
Static task
static1
Behavioral task
behavioral1
Sample
SparxSolverSetup.1-2.win_64.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
SparxSolverSetup.1-2.win_64.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/SpiderBanner.dll
Resource
win7-20241010-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/SpiderBanner.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/StdUtils.dll
Resource
win7-20241010-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/StdUtils.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral7
Sample
$PLUGINSDIR/System.dll
Resource
win7-20241023-en
Behavioral task
behavioral8
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral9
Sample
$PLUGINSDIR/WinShell.dll
Resource
win7-20240903-en
Behavioral task
behavioral10
Sample
$PLUGINSDIR/WinShell.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral11
Sample
LICENSES.chromium.html
Resource
win7-20240729-en
Behavioral task
behavioral12
Sample
LICENSES.chromium.html
Resource
win10v2004-20241007-en
Behavioral task
behavioral13
Sample
SparxMaths-Solver.exe
Resource
win7-20241010-en
Behavioral task
behavioral14
Sample
SparxMaths-Solver.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral15
Sample
d3dcompiler_47.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral16
Sample
ffmpeg.dll
Resource
win7-20241010-en
Behavioral task
behavioral17
Sample
ffmpeg.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral18
Sample
libEGL.dll
Resource
win7-20240903-en
Behavioral task
behavioral19
Sample
libEGL.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral20
Sample
libGLESv2.dll
Resource
win7-20241023-en
Behavioral task
behavioral21
Sample
libGLESv2.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral22
Sample
locales/uk.ps1
Resource
win7-20240903-en
Behavioral task
behavioral23
Sample
locales/uk.ps1
Resource
win10v2004-20241007-en
Behavioral task
behavioral24
Sample
resources/app.asar.unpacked/node_modules/playwright-core/ThirdPartyNotices.js
Resource
win7-20240903-en
Behavioral task
behavioral25
Sample
resources/app.asar.unpacked/node_modules/playwright-core/ThirdPartyNotices.js
Resource
win10v2004-20241007-en
Behavioral task
behavioral26
Sample
resources/app.asar.unpacked/node_modules/playwright-core/bin/PrintDeps.exe
Resource
win7-20240903-en
Behavioral task
behavioral27
Sample
resources/app.asar.unpacked/node_modules/playwright-core/bin/PrintDeps.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral28
Sample
resources/app.asar.unpacked/node_modules/playwright-core/bin/install_media_pack.ps1
Resource
win7-20240708-en
Behavioral task
behavioral29
Sample
resources/app.asar.unpacked/node_modules/playwright-core/bin/install_media_pack.ps1
Resource
win10v2004-20241007-en
Behavioral task
behavioral30
Sample
resources/app.asar.unpacked/node_modules/playwright-core/bin/reinstall_chrome_beta_linux.sh
Resource
ubuntu1804-amd64-20240611-en
Behavioral task
behavioral31
Sample
resources/app.asar.unpacked/node_modules/playwright-core/bin/reinstall_chrome_beta_linux.sh
Resource
debian9-armhf-20240729-en
General
-
Target
resources/app.asar.unpacked/node_modules/playwright-core/bin/reinstall_chrome_beta_linux.sh
-
Size
1KB
-
MD5
cba6e6dfa77711fe4a65875b4a77c032
-
SHA1
66164fc6a7f678daa293570e05963555d418831e
-
SHA256
17d0c0361e8a66efc1db45004a75fad9cb33426d6c07b90db838929c4ae96a74
-
SHA512
7d30bb242d3deb0e7e3df8881103bfa868cddbd6ff01aaae6d64aa37eecaaf145785e21882e2fdf1c9e6aee2e05a1d888438a1fc780fb78c36e22e4ebd496842
Malware Config
Signatures
-
Processes:
dpkgdpkgapt-configfindapt-configdpkggpgvdpkgdpkgsedgpg-connect-agentdpkgdpkgapt-getgpgvdpkgdpkgdpkgapt-configapt-configdpkgcurldpkggpgconfsedsedapt-configcpdpkgfindapt-configdpkgapt-configcpapt-configdpkghttpsapt-configgpgconfdpkgapt-configdpkgapt-configapt-configdpkgapt-configapt-configgpgvdpkgsedapt-configapt-configdpkggpg-connect-agentdescription ioc process File opened for reading /proc/filesystems dpkg File opened for reading /proc/filesystems dpkg File opened for reading /proc/self/fd apt-config File opened for reading /proc/filesystems find File opened for reading /proc/self/fd apt-config File opened for reading /proc/filesystems dpkg File opened for reading /proc/sys/crypto/fips_enabled gpgv File opened for reading /proc/filesystems dpkg File opened for reading /proc/filesystems dpkg File opened for reading /proc/filesystems sed File opened for reading /proc/sys/crypto/fips_enabled gpg-connect-agent File opened for reading /proc/filesystems dpkg File opened for reading /proc/filesystems dpkg File opened for reading /proc/self/fd apt-get File opened for reading /proc/self/fd gpgv File opened for reading /proc/filesystems dpkg File opened for reading /proc/filesystems dpkg File opened for reading /proc/filesystems dpkg File opened for reading /proc/self/fd apt-config File opened for reading /proc/self/fd apt-config File opened for reading /proc/filesystems dpkg File opened for reading /proc/sys/crypto/fips_enabled curl File opened for reading /proc/filesystems dpkg File opened for reading /proc/sys/crypto/fips_enabled gpgconf File opened for reading /proc/filesystems sed File opened for reading /proc/filesystems sed File opened for reading /proc/self/fd apt-config File opened for reading /proc/filesystems cp File opened for reading /proc/filesystems dpkg File opened for reading /proc/filesystems find File opened for reading /proc/self/fd apt-config File opened for reading /proc/filesystems dpkg File opened for reading /proc/self/fd apt-config File opened for reading /proc/filesystems cp File opened for reading /proc/self/fd apt-config File opened for reading /proc/filesystems dpkg File opened for reading /proc/sys/crypto/fips_enabled https File opened for reading /proc/self/fd apt-config File opened for reading /proc/sys/crypto/fips_enabled gpgconf File opened for reading /proc/filesystems dpkg File opened for reading /proc/self/fd apt-config File opened for reading /proc/filesystems dpkg File opened for reading /proc/self/fd gpgconf File opened for reading /proc/self/fd apt-config File opened for reading /proc/self/fd gpgconf File opened for reading /proc/self/fd apt-config File opened for reading /proc/filesystems dpkg File opened for reading /proc/self/fd apt-config File opened for reading /proc/self/fd apt-config File opened for reading /proc/sys/crypto/fips_enabled gpgv File opened for reading /proc/filesystems dpkg File opened for reading /proc/filesystems sed File opened for reading /proc/self/fd apt-config File opened for reading /proc/self/fd apt-config File opened for reading /proc/filesystems dpkg File opened for reading /proc/sys/kernel/ngroups_max apt-get File opened for reading /proc/sys/crypto/fips_enabled gpg-connect-agent -
Writes file to tmp directory 21 IoCs
Malware often drops required files in the /tmp directory.
Processes:
apt-getgpgvtouchapt-keycptouchapt-keycpdescription ioc process File opened for modification /tmp/fileutl.message.K4wUg7 apt-get File opened for modification /tmp/apt.conf.hZpyvh gpgv File opened for modification /tmp/apt.sig.aNkGAn gpgv File opened for modification /tmp/apt-key-gpghome.tbektaDwfg/pubring.gpg touch File opened for modification /tmp/fileutl.message.BAjgZp apt-get File opened for modification /tmp/fileutl.message.tkVKZl apt-get File opened for modification /tmp/apt-key-gpghome.tbektaDwfg/pubring.gpg apt-key File opened for modification /tmp/fileutl.message.vTHl2O apt-get File opened for modification /tmp/apt-key-gpghome.tbektaDwfg/pubring.orig.gpg cp File opened for modification /tmp/apt-key-gpghome.tbektaDwfg/gpg.1.sh apt-key File opened for modification /tmp/fileutl.message.fLoHYh apt-get File opened for modification /tmp/apt.conf.3qSDVe gpgv File opened for modification /tmp/apt-key-gpghome.SUT7ZQOo48/pubring.gpg touch File opened for modification /tmp/apt-key-gpghome.SUT7ZQOo48/pubring.gpg apt-key File opened for modification /tmp/apt-key-gpghome.SUT7ZQOo48/gpg.1.sh apt-key File opened for modification /tmp/fileutl.message.qRbcGv apt-get File opened for modification /tmp/fileutl.message.Tu67Gi apt-get File opened for modification /tmp/apt.data.NGgnBt gpgv File opened for modification /tmp/apt-key-gpghome.SUT7ZQOo48/pubring.orig.gpg cp File opened for modification /tmp/fileutl.message.Iz2Om7 apt-get File opened for modification /tmp/fileutl.message.qVjPmH apt-get
Processes
-
/tmp/resources/app.asar.unpacked/node_modules/playwright-core/bin/reinstall_chrome_beta_linux.sh/tmp/resources/app.asar.unpacked/node_modules/playwright-core/bin/reinstall_chrome_beta_linux.sh1⤵PID:826
-
/usr/local/sbin/bashbash /tmp/resources/app.asar.unpacked/node_modules/playwright-core/bin/reinstall_chrome_beta_linux.sh1⤵PID:826
-
/usr/local/bin/bashbash /tmp/resources/app.asar.unpacked/node_modules/playwright-core/bin/reinstall_chrome_beta_linux.sh1⤵PID:826
-
/usr/sbin/bashbash /tmp/resources/app.asar.unpacked/node_modules/playwright-core/bin/reinstall_chrome_beta_linux.sh1⤵PID:826
-
/usr/bin/bashbash /tmp/resources/app.asar.unpacked/node_modules/playwright-core/bin/reinstall_chrome_beta_linux.sh1⤵PID:826
-
/sbin/bashbash /tmp/resources/app.asar.unpacked/node_modules/playwright-core/bin/reinstall_chrome_beta_linux.sh1⤵PID:826
-
/bin/bashbash /tmp/resources/app.asar.unpacked/node_modules/playwright-core/bin/reinstall_chrome_beta_linux.sh1⤵PID:826
-
/usr/bin/archarch2⤵PID:830
-
-
/bin/bashbash -c "source /etc/os-release && echo \$ID"2⤵PID:831
-
-
/usr/bin/dpkgdpkg --get-selections2⤵
- Reads runtime system information
- Software Deployment Tools
PID:836
-
-
/bin/grepgrep -q "^google-chrome-beta[[:space:]]*install\$"2⤵PID:837
-
-
/usr/bin/apt-getapt-get update2⤵
- Reads runtime system information
- Writes file to tmp directory
- Software Deployment Tools
PID:838 -
/usr/bin/dpkg/usr/bin/dpkg --print-foreign-architectures3⤵
- Reads runtime system information
PID:839
-
-
/usr/lib/apt/methods/http/usr/lib/apt/methods/http3⤵PID:840
-
-
/usr/lib/apt/methods/https/usr/lib/apt/methods/https3⤵PID:841
-
-
/usr/lib/apt/methods/https/usr/lib/apt/methods/https3⤵
- Reads runtime system information
PID:842
-
-
/usr/lib/apt/methods/http/usr/lib/apt/methods/http3⤵PID:843
-
-
/usr/lib/apt/methods/gpgv/usr/lib/apt/methods/gpgv3⤵PID:845
-
-
/usr/lib/apt/methods/gpgv/usr/lib/apt/methods/gpgv3⤵
- Reads runtime system information
- Writes file to tmp directory
PID:846 -
/usr/bin/apt-key/usr/bin/apt-key --quiet --readonly verify --status-fd 3 /tmp/apt.sig.aNkGAn /tmp/apt.data.NGgnBt4⤵
- Writes file to tmp directory
PID:848 -
/usr/bin/apt-configapt-config shell MASTER_KEYRING APT::Key::MasterKeyring5⤵
- Reads runtime system information
PID:850 -
/usr/bin/dpkg/usr/bin/dpkg --print-foreign-architectures6⤵
- Reads runtime system information
PID:851
-
-
-
/usr/bin/apt-configapt-config shell ARCHIVE_KEYRING APT::Key::ArchiveKeyring5⤵
- Reads runtime system information
PID:852 -
/usr/bin/dpkg/usr/bin/dpkg --print-foreign-architectures6⤵
- Reads runtime system information
PID:853
-
-
-
/usr/bin/apt-configapt-config shell REMOVED_KEYS APT::Key::RemovedKeys5⤵
- Reads runtime system information
PID:854 -
/usr/bin/dpkg/usr/bin/dpkg --print-foreign-architectures6⤵
- Reads runtime system information
PID:855
-
-
-
/usr/bin/apt-configapt-config shell ARCHIVE_KEYRING_URI APT::Key::ArchiveKeyringURI5⤵
- Reads runtime system information
PID:856 -
/usr/bin/dpkg/usr/bin/dpkg --print-foreign-architectures6⤵
- Reads runtime system information
PID:857
-
-
-
/usr/bin/apt-configapt-config shell TRUSTEDFILE Apt::GPGV::TrustedKeyring5⤵
- Reads runtime system information
PID:858 -
/usr/bin/dpkg/usr/bin/dpkg --print-foreign-architectures6⤵
- Reads runtime system information
PID:859
-
-
-
/usr/bin/apt-configapt-config shell TRUSTEDFILE Dir::Etc::Trusted/f5⤵
- Reads runtime system information
PID:860 -
/usr/bin/dpkg/usr/bin/dpkg --print-foreign-architectures6⤵
- Reads runtime system information
PID:861
-
-
-
/usr/bin/apt-configapt-config shell GPGV Apt::Key::gpgvcommand5⤵
- Reads runtime system information
PID:863 -
/usr/bin/dpkg/usr/bin/dpkg --print-foreign-architectures6⤵
- Reads runtime system information
PID:864
-
-
-
/bin/mktempmktemp --directory --tmpdir apt-key-gpghome.XXXXXXXXXX5⤵PID:865
-
-
/bin/chmodchmod 700 /tmp/apt-key-gpghome.tbektaDwfg5⤵PID:866
-
-
/bin/readlinkreadlink -f /tmp/apt-key-gpghome.tbektaDwfg5⤵PID:867
-
-
/bin/rmrm -f /tmp/apt-key-gpghome.tbektaDwfg/pubring.gpg5⤵PID:868
-
-
/usr/bin/touchtouch /tmp/apt-key-gpghome.tbektaDwfg/pubring.gpg5⤵
- Writes file to tmp directory
PID:869
-
-
/usr/bin/apt-configapt-config shell TRUSTEDPARTS Dir::Etc::TrustedParts/d5⤵
- Reads runtime system information
PID:870 -
/usr/bin/dpkg/usr/bin/dpkg --print-foreign-architectures6⤵
- Reads runtime system information
PID:871
-
-
-
/bin/readlinkreadlink -f /etc/apt/trusted.gpg.d/5⤵PID:872
-
-
/usr/bin/findfind /etc/apt/trusted.gpg.d -mindepth 1 -maxdepth 1 "(" -name "*.gpg" -o -name "*.asc" ")"5⤵
- Reads runtime system information
PID:873
-
-
/usr/bin/sortsort5⤵PID:876
-
-
/bin/catcat /etc/apt/trusted.gpg.d/debian-archive-buster-automatic.gpg5⤵PID:878
-
-
/bin/catcat /etc/apt/trusted.gpg.d/debian-archive-buster-security-automatic.gpg5⤵PID:880
-
-
/bin/catcat /etc/apt/trusted.gpg.d/debian-archive-buster-stable.gpg5⤵PID:882
-
-
/bin/catcat /etc/apt/trusted.gpg.d/debian-archive-jessie-automatic.gpg5⤵PID:884
-
-
/bin/catcat /etc/apt/trusted.gpg.d/debian-archive-jessie-security-automatic.gpg5⤵PID:886
-
-
/bin/catcat /etc/apt/trusted.gpg.d/debian-archive-jessie-stable.gpg5⤵PID:888
-
-
/bin/catcat /etc/apt/trusted.gpg.d/debian-archive-stretch-automatic.gpg5⤵PID:890
-
-
/bin/catcat /etc/apt/trusted.gpg.d/debian-archive-stretch-security-automatic.gpg5⤵PID:892
-
-
/bin/catcat /etc/apt/trusted.gpg.d/debian-archive-stretch-stable.gpg5⤵PID:894
-
-
/bin/cpcp -a /tmp/apt-key-gpghome.tbektaDwfg/pubring.gpg /tmp/apt-key-gpghome.tbektaDwfg/pubring.orig.gpg5⤵
- Reads runtime system information
- Writes file to tmp directory
PID:895
-
-
/bin/sedsed -e "s#'#'\"'\"'#g"5⤵
- Reads runtime system information
PID:898
-
-
/bin/sedsed -e "s#'#'\"'\"'#g"5⤵
- Reads runtime system information
PID:901
-
-
/usr/bin/gpgvgpgv --homedir /tmp/apt-key-gpghome.tbektaDwfg --keyring /tmp/apt-key-gpghome.tbektaDwfg/pubring.gpg --ignore-time-conflict --status-fd 3 /tmp/apt.sig.aNkGAn /tmp/apt.data.NGgnBt5⤵
- Reads runtime system information
PID:902
-
-
/usr/bin/gpgconfgpgconf --kill gpg-agent5⤵
- Reads runtime system information
PID:903 -
/usr/bin/gpg-connect-agentgpg-connect-agent --no-autostart KILLAGENT6⤵
- Reads runtime system information
PID:904
-
-
-
/bin/rmrm -rf /tmp/apt-key-gpghome.tbektaDwfg5⤵PID:905
-
-
-
/usr/bin/apt-key/usr/bin/apt-key --quiet --readonly verify --status-fd 3 /var/lib/apt/lists/archive.debian.org_debian_dists_stretch_Release.gpg /var/lib/apt/lists/archive.debian.org_debian_dists_stretch_Release4⤵
- Writes file to tmp directory
PID:907 -
/usr/bin/apt-configapt-config shell MASTER_KEYRING APT::Key::MasterKeyring5⤵
- Reads runtime system information
PID:909 -
/usr/bin/dpkg/usr/bin/dpkg --print-foreign-architectures6⤵
- Reads runtime system information
PID:910
-
-
-
/usr/bin/apt-configapt-config shell ARCHIVE_KEYRING APT::Key::ArchiveKeyring5⤵
- Reads runtime system information
PID:911 -
/usr/bin/dpkg/usr/bin/dpkg --print-foreign-architectures6⤵
- Reads runtime system information
PID:912
-
-
-
/usr/bin/apt-configapt-config shell REMOVED_KEYS APT::Key::RemovedKeys5⤵
- Reads runtime system information
PID:913 -
/usr/bin/dpkg/usr/bin/dpkg --print-foreign-architectures6⤵
- Reads runtime system information
PID:914
-
-
-
/usr/bin/apt-configapt-config shell ARCHIVE_KEYRING_URI APT::Key::ArchiveKeyringURI5⤵
- Reads runtime system information
PID:915 -
/usr/bin/dpkg/usr/bin/dpkg --print-foreign-architectures6⤵
- Reads runtime system information
PID:916
-
-
-
/usr/bin/apt-configapt-config shell TRUSTEDFILE Apt::GPGV::TrustedKeyring5⤵
- Reads runtime system information
PID:917 -
/usr/bin/dpkg/usr/bin/dpkg --print-foreign-architectures6⤵
- Reads runtime system information
PID:918
-
-
-
/usr/bin/apt-configapt-config shell TRUSTEDFILE Dir::Etc::Trusted/f5⤵
- Reads runtime system information
PID:919 -
/usr/bin/dpkg/usr/bin/dpkg --print-foreign-architectures6⤵
- Reads runtime system information
PID:920
-
-
-
/usr/bin/apt-configapt-config shell GPGV Apt::Key::gpgvcommand5⤵
- Reads runtime system information
PID:922 -
/usr/bin/dpkg/usr/bin/dpkg --print-foreign-architectures6⤵
- Reads runtime system information
PID:923
-
-
-
/bin/mktempmktemp --directory --tmpdir apt-key-gpghome.XXXXXXXXXX5⤵PID:924
-
-
/bin/chmodchmod 700 /tmp/apt-key-gpghome.SUT7ZQOo485⤵PID:925
-
-
/bin/readlinkreadlink -f /tmp/apt-key-gpghome.SUT7ZQOo485⤵PID:926
-
-
/bin/rmrm -f /tmp/apt-key-gpghome.SUT7ZQOo48/pubring.gpg5⤵PID:927
-
-
/usr/bin/touchtouch /tmp/apt-key-gpghome.SUT7ZQOo48/pubring.gpg5⤵
- Writes file to tmp directory
PID:928
-
-
/usr/bin/apt-configapt-config shell TRUSTEDPARTS Dir::Etc::TrustedParts/d5⤵
- Reads runtime system information
PID:929 -
/usr/bin/dpkg/usr/bin/dpkg --print-foreign-architectures6⤵
- Reads runtime system information
PID:930
-
-
-
/bin/readlinkreadlink -f /etc/apt/trusted.gpg.d/5⤵PID:931
-
-
/usr/bin/findfind /etc/apt/trusted.gpg.d -mindepth 1 -maxdepth 1 "(" -name "*.gpg" -o -name "*.asc" ")"5⤵
- Reads runtime system information
PID:932
-
-
/usr/bin/sortsort5⤵PID:935
-
-
/bin/catcat /etc/apt/trusted.gpg.d/debian-archive-buster-automatic.gpg5⤵PID:937
-
-
/bin/catcat /etc/apt/trusted.gpg.d/debian-archive-buster-security-automatic.gpg5⤵PID:939
-
-
/bin/catcat /etc/apt/trusted.gpg.d/debian-archive-buster-stable.gpg5⤵PID:941
-
-
/bin/catcat /etc/apt/trusted.gpg.d/debian-archive-jessie-automatic.gpg5⤵PID:943
-
-
/bin/catcat /etc/apt/trusted.gpg.d/debian-archive-jessie-security-automatic.gpg5⤵PID:945
-
-
/bin/catcat /etc/apt/trusted.gpg.d/debian-archive-jessie-stable.gpg5⤵PID:947
-
-
/bin/catcat /etc/apt/trusted.gpg.d/debian-archive-stretch-automatic.gpg5⤵PID:949
-
-
/bin/catcat /etc/apt/trusted.gpg.d/debian-archive-stretch-security-automatic.gpg5⤵PID:951
-
-
/bin/catcat /etc/apt/trusted.gpg.d/debian-archive-stretch-stable.gpg5⤵PID:953
-
-
/bin/cpcp -a /tmp/apt-key-gpghome.SUT7ZQOo48/pubring.gpg /tmp/apt-key-gpghome.SUT7ZQOo48/pubring.orig.gpg5⤵
- Reads runtime system information
- Writes file to tmp directory
PID:954
-
-
/bin/sedsed -e "s#'#'\"'\"'#g"5⤵
- Reads runtime system information
PID:957
-
-
/bin/sedsed -e "s#'#'\"'\"'#g"5⤵
- Reads runtime system information
PID:960
-
-
/usr/bin/gpgvgpgv --homedir /tmp/apt-key-gpghome.SUT7ZQOo48 --keyring /tmp/apt-key-gpghome.SUT7ZQOo48/pubring.gpg --ignore-time-conflict --status-fd 3 /var/lib/apt/lists/archive.debian.org_debian_dists_stretch_Release.gpg /var/lib/apt/lists/archive.debian.org_debian_dists_stretch_Release5⤵
- Reads runtime system information
PID:961
-
-
/usr/bin/gpgconfgpgconf --kill gpg-agent5⤵
- Reads runtime system information
PID:962 -
/usr/bin/gpg-connect-agentgpg-connect-agent --no-autostart KILLAGENT6⤵
- Reads runtime system information
PID:963
-
-
-
/bin/rmrm -rf /tmp/apt-key-gpghome.SUT7ZQOo485⤵PID:964
-
-
-
-
/usr/bin/dpkg/usr/bin/dpkg --print-foreign-architectures3⤵
- Reads runtime system information
PID:968
-
-
/usr/bin/dpkg/usr/bin/dpkg --print-foreign-architectures3⤵
- Reads runtime system information
PID:969
-
-
-
/usr/bin/curlcurl -O https://dl.google.com/linux/direct/google-chrome-beta_current_amd64.deb2⤵
- Reads runtime system information
PID:970
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
82B
MD53a33125a48d86ca13d2e13a527dffb15
SHA141214131a46618a7e8cce167562f402aee00eb0e
SHA256ba0ad3b5c92a0257066230ebd30f6395236c4348dac6f9dbb5458c8e9570703a
SHA51280bea669eb0358bdee5932da63ba8d8eca727bb361d76762577f4744a98dfe39039ed11b0097d37ca0b1767325d0d457cf0e2e58c7784c1d89e9a412dcf5e438
-
Filesize
82B
MD51230edd57a23d445a790de39498e33f3
SHA1cd81218b92de18d6d06357912bf2fe259298f298
SHA25695eb1ea6aef26b5a040abfe86a6e9a95c03892ee74f143aeb0efb23615500093
SHA512db395e88f287d54a53cf7faa4b90fe4bf4aee5a985a9a6d784af1253bfedcdb740b55d5726725f95bb2e170b7b36fe1c1f3a3983c4fc9c8ee7a42545297bff05
-
Filesize
18KB
MD5760d3ab91f417958475b9a6342a5b92e
SHA1137a06aea4b5c9e9ca11f0f5f1225da1c275c334
SHA25642b348802c4290af6f9f30f984513f22fdd342ac3561ccb82957561a6b7c291f
SHA5126cefcfae1c95c94b66b46d9242e62ddf7d7c65bd8d9bc9dc4e4c6230443ba33668ed160e1882f48a0b5daf59a46ccca09240ebe666017f059bd55e02fb1f2db6
-
Filesize
23KB
MD5d63fbab9dfb826d53f7b3aaea45dbfb5
SHA159841d8e5423f788292af76d4350a948f4e25f53
SHA256de329f1f48b751a7527f8ce3150452a4282ce69990e9318ab82d5b46b9f751ca
SHA51220118f98c87eb60f0abafd5b4c2ffb4b1faf92777ee7402b98c0f5dc42d492c83f94d6903bdeee006187ac344a57afeaa84b54a973b483ff13e49773071d8198
-
Filesize
47KB
MD5a4dc094481f22304cab5550218e6e4de
SHA1f5886a324c0c026d0168656f23d1d898a0e43bd6
SHA256eef8c4d7d518a986e4f1cfeec729b55369b863ed6b62a23cbe9d88aa56de5391
SHA5120f040c957db3d500ba18315db33cca6eb18f9c80d952710f839833a73dd89b72e2e01178084c17348e312a427a6b9150937199b4912e71dfd1a7e2dd43723f68
-
Filesize
7KB
MD5b53e6ca4ed295fc38621315853f623d0
SHA145a416f014809735ec88854a3540c8e9e89eb102
SHA2566246307cc0130f6bd52510a477960f7c7be431b25979d7e20a88dc2fac58ac93
SHA51230b5d2571840c2319a4af3907afda8ab00cf2879c83aaee1048ca972c0d3ddbf7995a167a31b19c45195b636ab46e73b0534459c6ee79c557fac8bfc01d857ac
-
Filesize
15KB
MD52713b38b3d7345961d8b80f4463483b8
SHA1e6ec76aaebfea6a82f7984b57e07522a20365201
SHA256389d00b5cbd2f69f32065448000a0607aec056e39af958f62e89c4c7e6228248
SHA512ecee7b3045f49f7fa7443a8658602817bb2c8d2d07ae930536e3f2daaa5854903bf339af6c2fd4b02f8627f050ce360d2feddcf40569b58d304cfc459f418978
-
Filesize
7KB
MD5888b69612f796e76004b6312f7c07c5a
SHA18473a4114b60f4f93150e08c44f6908069943b43
SHA256b84b8be5406657e163fd2333afc00de1b91df4837563bfe330f34e30402456e2
SHA51276e05e08200975efbac0b1ebbc232135d35ad6b16bbe8b0238f01b6f9acf712a2479bf309aa81eb8eacfc3ee823a531b4e9b89cbf1364b1bf84c04abb90122bd
-
Filesize
56KB
MD5fd96c8ce5d0ef18d63bbe9ae17bb2659
SHA176b284743d95d3546df9d85c09712c830a30f614
SHA256ffc8a7a283b61633aac383ddf8f863df3f39ef241a07a4127f51a2495ef674b3
SHA5122486acdfc102f8f8498d8db2f205915115444dd118507369044202dc9a97109b4c738a2faf16c1f5ce5e4452ae0af17ae4691ac3bf5e7c5e2db271c0f40a4cb2
-
Filesize
1KB
MD570274ce622b0cc437ef7f0caddc9d232
SHA1124513a3ad2eb5aafa9be0920681e3bb8625979b
SHA2564055d2ccc7c4be062ed390944548206ece5ed7613eae114b9e53ef15f3905230
SHA512fed0054da258bb4a99e8adac359322d9ecc67caeee872309ea7d9863db6a1ec2a55497100e31538f42b43b9efc997e779e3774c8a0c6b0206254d7252d8699c8