1fdd74b8ece8754712fe0ccc0104a61bf6469174d628f66cd87d9e1249fa5707 | Triage

Analysis

max time kernel
1s
platform
debian-9_armhf
resource
debian9-armhf-20240611-en
resource tags

arch:armhfimage:debian9-armhf-20240611-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem
submitted
04-12-2024 06:12

Sharing

Report Analysis Logs

General

Target

HotmailChecker/.git/hooks/commit-msg.sample
Size

896B
MD5

579a3c1e12a1e74a98169175fb913012
SHA1

ee1ed5aad98a435f2020b6de35c173b75d9affac
SHA256

1f74d5e9292979b573ebd59741d46cb93ff391acdd083d340b94370753d92437
SHA512

d6bb7fa747f4625adf1877f546565cbe812ca7dd4168f7e9068e6732555d8737eba549546cf5946649e3f38de82d173aaf9c160a4c9f9445655258b4c5f955eb

Score

3^/10

discovery

Malware Config

Signatures

Reads runtime system information 1 IoCs

Reads data from /proc virtual filesystem.

description	ioc	Process
File opened for reading	/proc/filesystems	sed

/tmp/HotmailChecker/.git/hooks/commit-msg.sample
/tmp/HotmailChecker/.git/hooks/commit-msg.sample
1⤵
PID:691
- /usr/bin/sort
  sort
  2⤵
  PID:694
- /usr/bin/uniq
  uniq -c
  2⤵
  PID:695
- /bin/grep
  grep "^Signed-off-by: "
  2⤵
  PID:693
- /bin/sed
  sed -e "/^[ ]*1[ ]/d"
  2⤵
  - Reads runtime system information
  PID:696

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads