747091fd60a9c41ff26d3878bac923c9c14b5472238874754577e14d47b8cba7 | Triage

Submit
Reports

Overview

overview

Static

static

样本/Lin...9DC1D8

ubuntu-24.04-amd64

7

样本/Lin...B36C5B

ubuntu-24.04-amd64

6

样本/Lin...E3B383

ubuntu-24.04-amd64

8

样本/Lin...6F5973

ubuntu-22.04-amd64

1

样本/Lin...776DB8

ubuntu-18.04-amd64

1

样本/Lin...776DB8

debian-9-armhf

1

样本/Lin...776DB8

debian-9-mips

1

样本/Lin...776DB8

debian-9-mipsel

1

样本/Lin...C9A3F7

ubuntu-18.04-amd64

6

样本/Lin...C9A3F7

debian-9-armhf

6

样本/Lin...C9A3F7

debian-9-mips

6

样本/Lin...C9A3F7

debian-9-mipsel

6

样本/Lin...FECBE5

ubuntu-24.04-amd64

1AAF1A9F78...31.tar

ubuntu-18.04-amd64

1AAF1A9F78...31.tar

debian-9-armhf

1AAF1A9F78...31.tar

debian-9-mips

1AAF1A9F78...31.tar

debian-9-mipsel

xrx/chattr

ubuntu-24.04-amd64

1

xrx/init.sh

ubuntu-20.04-amd64

6

xrx/init0

ubuntu-22.04-amd64

8

xrx/scp

ubuntu-18.04-amd64

1

xrx/scp

debian-9-armhf

1

xrx/scp

debian-9-mips

1

xrx/scp

debian-9-mipsel

1

xrx/secure

ubuntu-20.04-amd64

7

xrx/uninstall.sh

ubuntu-18.04-amd64

6

xrx/uninstall.sh

debian-9-armhf

6

xrx/uninstall.sh

debian-9-mips

6

xrx/uninstall.sh

debian-9-mipsel

6

xrx/xrx

ubuntu-22.04-amd64

6

Resubmissions

27-11-2024 08:55

241127-kvn92stkar 10

27-11-2024 05:48

241127-ghggwszqes 10

Analysis

max time kernel
0s
max time network
129s
platform
ubuntu-24.04_amd64
resource
ubuntu2404-amd64-20240523-en
resource tags

arch:amd64arch:i386image:ubuntu2404-amd64-20240523-enkernel:6.8.0-31-genericlocale:en-usos:ubuntu-24.04-amd64system
submitted
27-11-2024 05:48

Sharing

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

样本/Linux/shc加密脚本/069AD3938C3F9C049F670A8EB49DC1D8

Resource

ubuntu2404-amd64-20240729-en

defense_evasion discovery execution persistence privilege_escalatio

ubuntu-24.04-amd64

7 signatures

150 seconds

Behavioral task

behavioral2

Sample

样本/Linux/shc加密脚本/42693670C71A529A11E81943F5B36C5B

Resource

ubuntu2404-amd64-20240523-en

ubuntu-24.04-amd64

2 signatures

150 seconds

Behavioral task

behavioral3

Sample

样本/Linux/shc加密脚本/73F9917255A953EB749F5A3C90E3B383

Resource

ubuntu2404-amd64-20240523-en

antivm credential_access defense_evasion discovery execution persistence privilege_escalatio privilege_escalation

ubuntu-24.04-amd64

21 signatures

150 seconds

Behavioral task

behavioral4

Sample

样本/Linux/shc加密脚本/CDAFEFEDB4709959B4260435DC6F5973

Resource

ubuntu2204-amd64-20240611-en

ubuntu-22.04-amd64

0 signatures

150 seconds

Behavioral task

behavioral5

Sample

样本/Linux/sh恶意脚本/9C8A5EF51CF8A89F5F00498A5A776DB8

Resource

ubuntu1804-amd64-20240611-en

ubuntu-18.04-amd64

0 signatures

150 seconds

Behavioral task

behavioral6

Sample

样本/Linux/sh恶意脚本/9C8A5EF51CF8A89F5F00498A5A776DB8

Resource

debian9-armhf-20240729-en

debian-9-armhf

0 signatures

150 seconds

Behavioral task

behavioral7

Sample

样本/Linux/sh恶意脚本/9C8A5EF51CF8A89F5F00498A5A776DB8

Resource

debian9-mipsbe-20240418-en

debian-9-mips

0 signatures

150 seconds

Behavioral task

behavioral8

Sample

样本/Linux/sh恶意脚本/9C8A5EF51CF8A89F5F00498A5A776DB8

Resource

debian9-mipsel-20240611-en

debian-9-mipsel

0 signatures

150 seconds

Behavioral task

behavioral9

Sample

样本/Linux/sh恶意脚本/E4CC1A7F992909E8509520FDD6C9A3F7

Resource

ubuntu1804-amd64-20240611-en

ubuntu-18.04-amd64

3 signatures

150 seconds

Behavioral task

behavioral10

Sample

样本/Linux/sh恶意脚本/E4CC1A7F992909E8509520FDD6C9A3F7

Resource

debian9-armhf-20240611-en

debian-9-armhf

3 signatures

150 seconds

Behavioral task

behavioral11

Sample

样本/Linux/sh恶意脚本/E4CC1A7F992909E8509520FDD6C9A3F7

Resource

debian9-mipsbe-20240611-en

debian-9-mips

3 signatures

150 seconds

Behavioral task

behavioral12

Sample

样本/Linux/sh恶意脚本/E4CC1A7F992909E8509520FDD6C9A3F7

Resource

debian9-mipsel-20240418-en

debian-9-mipsel

3 signatures

150 seconds

Behavioral task

behavioral13

Sample

样本/Linux/挖矿程序/9D099882A24757AC5033B0C675FECBE5

Resource

ubuntu2404-amd64-20240523-en

xmrig_linux miner

ubuntu-24.04-amd64

2 signatures

150 seconds

Behavioral task

behavioral14

Sample

1AAF1A9F7877DC2C899D910A52F67F31.tar

Resource

ubuntu1804-amd64-20240729-en

ubuntu-18.04-amd64

0 signatures

150 seconds

Behavioral task

behavioral15

Sample

1AAF1A9F7877DC2C899D910A52F67F31.tar

Resource

debian9-armhf-20240611-en

debian-9-armhf

0 signatures

150 seconds

Behavioral task

behavioral16

Sample

1AAF1A9F7877DC2C899D910A52F67F31.tar

Resource

debian9-mipsbe-20240418-en

debian-9-mips

0 signatures

150 seconds

Behavioral task

behavioral17

Sample

1AAF1A9F7877DC2C899D910A52F67F31.tar

Resource

debian9-mipsel-20240611-en

debian-9-mipsel

0 signatures

150 seconds

Behavioral task

behavioral18

Sample

xrx/chattr

Resource

ubuntu2404-amd64-20240523-en

ubuntu-24.04-amd64

0 signatures

150 seconds

Behavioral task

behavioral19

Sample

xrx/init.sh

Resource

ubuntu2004-amd64-20240729-en

ubuntu-20.04-amd64

3 signatures

150 seconds

Behavioral task

behavioral20

Sample

xrx/init0

Resource

ubuntu2204-amd64-20240611-en

antivm credential_access defense_evasion discovery execution persistence privilege_escalatio privilege_escalation

ubuntu-22.04-amd64

22 signatures

150 seconds

Behavioral task

behavioral21

Sample

xrx/scp

Resource

ubuntu1804-amd64-20240729-en

ubuntu-18.04-amd64

0 signatures

150 seconds

Behavioral task

behavioral22

Sample

xrx/scp

Resource

debian9-armhf-20240418-en

debian-9-armhf

0 signatures

150 seconds

Behavioral task

behavioral23

Sample

xrx/scp

Resource

debian9-mipsbe-20240611-en

debian-9-mips

0 signatures

150 seconds

Behavioral task

behavioral24

Sample

xrx/scp

Resource

debian9-mipsel-20240611-en

debian-9-mipsel

0 signatures

150 seconds

Behavioral task

behavioral25

Sample

xrx/secure

Resource

ubuntu2004-amd64-20240508-en

defense_evasion discovery execution persistence privilege_escalatio

ubuntu-20.04-amd64

6 signatures

150 seconds

Behavioral task

behavioral26

Sample

xrx/uninstall.sh

Resource

ubuntu1804-amd64-20240729-en

ubuntu-18.04-amd64

3 signatures

150 seconds

Behavioral task

behavioral27

Sample

xrx/uninstall.sh

Resource

debian9-armhf-20240611-en

debian-9-armhf

3 signatures

150 seconds

Behavioral task

behavioral28

Sample

xrx/uninstall.sh

Resource

debian9-mipsbe-20240611-en

debian-9-mips

3 signatures

150 seconds

Behavioral task

behavioral29

Sample

xrx/uninstall.sh

Resource

debian9-mipsel-20240226-en

debian-9-mipsel

3 signatures

150 seconds

Behavioral task

behavioral30

Sample

xrx/xrx

Resource

ubuntu2204-amd64-20240729-en

antivm discovery

ubuntu-22.04-amd64

6 signatures

150 seconds

Report Analysis Logs

General

Target

xrx/chattr
Size

35KB
MD5

a074fef55aacf28bd6d7a5b2f5a99fc9
SHA1

2217b96394209dac95f75bdbd78f97f48a2c7f5d
SHA256

34a4f26cb133ab9bfaf9339e73b3421f88b3cf2ae7b59be0a186b19f8dd3fb66
SHA512

4c1899197719512f4088253bb8579f139f8a21a67f8f801009c1a3137335ca677d1ef43cebd6d3b05f45fb20b5fe3561798f9a8a720a82442382d620109abf14
SSDEEP

768:5TPE/yJQgRjt7wEYp2EeggGPVyzErU2np:xjQgVt8EYp2ETPoorUq

Score

1^/10

Malware Config

Signatures

Processes

/tmp/xrx/chattr
/tmp/xrx/chattr
1⤵
PID:2534

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

© 2018-2024

Terms | Privacy