78276bd481a04c29109fbbd8313701e5b814165fa4b48515ec4489ccfda93107

Submit
Reports

Overview

overview

Static

static

script_mal...6c1.sh

ubuntu-18.04-amd64

script_mal...6c1.sh

debian-9-armhf

script_mal...6c1.sh

debian-9-mips

script_mal...6c1.sh

debian-9-mipsel

script_malware/1.sh

ubuntu-18.04-amd64

script_malware/1.sh

debian-9-armhf

script_malware/1.sh

debian-9-mips

script_malware/1.sh

debian-9-mipsel

script_mal...459.sh

ubuntu-18.04-amd64

script_mal...459.sh

debian-9-armhf

script_mal...459.sh

debian-9-mips

script_mal...459.sh

debian-9-mipsel

script_mal...ux.elf

ubuntu-22.04-amd64

script_mal...da.elf

ubuntu-22.04-amd64

script_malware/23.sh

ubuntu-18.04-amd64

script_malware/23.sh

debian-9-armhf

script_malware/23.sh

debian-9-mips

script_malware/23.sh

debian-9-mipsel

script_malware/404

ubuntu-18.04-amd64

script_malware/404

debian-9-armhf

script_malware/404

debian-9-mips

script_malware/404

debian-9-mipsel

script_mal...c5b.py

windows7-x64

script_mal...c5b.py

windows10-2004-x64

script_mal...006.sh

ubuntu-18.04-amd64

script_mal...006.sh

debian-9-armhf

script_mal...006.sh

debian-9-mips

script_mal...006.sh

debian-9-mipsel

script_mal...oPy.sh

ubuntu-18.04-amd64

script_mal...oPy.sh

debian-9-armhf

script_mal...oPy.sh

debian-9-mips

script_mal...oPy.sh

debian-9-mipsel

Analysis

max time kernel
0s
max time network
129s
platform
ubuntu-22.04_amd64
resource
ubuntu2204-amd64-20240729-en
resource tags

arch:amd64arch:i386image:ubuntu2204-amd64-20240729-enkernel:5.15.0-105-genericlocale:en-usos:ubuntu-22.04-amd64system
submitted
06-12-2024 14:06

Sharing

Copy URL

Twitter E-mail

Static task

static1

Behavioral task

behavioral1

Sample

script_malware/063ccf736c2c19ca5db70b8d8a7cf00377899c16023c63fee836bdefadd336c1.sh

Resource

ubuntu1804-amd64-20240611-en

ubuntu-18.04-amd64

13 signatures

150 seconds

Behavioral task

behavioral2

Sample

script_malware/063ccf736c2c19ca5db70b8d8a7cf00377899c16023c63fee836bdefadd336c1.sh

Resource

debian9-armhf-20240611-en

antivm defense_evasion discovery exection execution persistence privilege_escalatio privilege_escalation

debian-9-armhf

13 signatures

150 seconds

Behavioral task

behavioral3

Sample

script_malware/063ccf736c2c19ca5db70b8d8a7cf00377899c16023c63fee836bdefadd336c1.sh

Resource

debian9-mipsbe-20240611-en

defense_evasion discovery exection execution persistence privilege_escalatio privilege_escalation

debian-9-mips

12 signatures

150 seconds

Behavioral task

behavioral4

Sample

script_malware/063ccf736c2c19ca5db70b8d8a7cf00377899c16023c63fee836bdefadd336c1.sh

Resource

debian9-mipsel-20240226-en

defense_evasion discovery exection execution persistence privilege_escalatio privilege_escalation

debian-9-mipsel

12 signatures

150 seconds

Behavioral task

behavioral5

Sample

script_malware/1.sh

Resource

ubuntu1804-amd64-20240611-en

xmrig_linux defense_evasion discovery evasion execution miner persistence privilege_escalatio privilege_escalation rootkit

ubuntu-18.04-amd64

20 signatures

150 seconds

Behavioral task

behavioral6

Sample

script_malware/1.sh

Resource

debian9-armhf-20240418-en

defense_evasion discovery evasion privilege_escalation

debian-9-armhf

7 signatures

150 seconds

Behavioral task

behavioral7

Sample

script_malware/1.sh

Resource

debian9-mipsbe-20240611-en

defense_evasion discovery execution persistence privilege_escalatio privilege_escalation

debian-9-mips

10 signatures

150 seconds

Behavioral task

behavioral8

Sample

script_malware/1.sh

Resource

debian9-mipsel-20240611-en

defense_evasion discovery execution persistence privilege_escalatio privilege_escalation

debian-9-mipsel

11 signatures

150 seconds

Behavioral task

behavioral9

Sample

script_malware/10c3b6b03a9bf105d264a8e7f30dcab0a6c59a414529b0af0a6bd9f1d2984459.sh

Resource

ubuntu1804-amd64-20240729-en

defense_evasion discovery

ubuntu-18.04-amd64

5 signatures

150 seconds

Behavioral task

behavioral10

Sample

script_malware/10c3b6b03a9bf105d264a8e7f30dcab0a6c59a414529b0af0a6bd9f1d2984459.sh

Resource

debian9-armhf-20240418-en

defense_evasion discovery

debian-9-armhf

5 signatures

150 seconds

Behavioral task

behavioral11

Sample

script_malware/10c3b6b03a9bf105d264a8e7f30dcab0a6c59a414529b0af0a6bd9f1d2984459.sh

Resource

debian9-mipsbe-20240611-en

defense_evasion discovery

debian-9-mips

5 signatures

150 seconds

Behavioral task

behavioral12

Sample

script_malware/10c3b6b03a9bf105d264a8e7f30dcab0a6c59a414529b0af0a6bd9f1d2984459.sh

Resource

debian9-mipsel-20240226-en

defense_evasion discovery

debian-9-mipsel

5 signatures

150 seconds

Behavioral task

behavioral13

Sample

script_malware/164f8295_linux.elf

Resource

ubuntu2204-amd64-20240611-en

discovery

ubuntu-22.04-amd64

1 signatures

150 seconds

Behavioral task

behavioral14

Sample

script_malware/21162bbd796ad2bf9954265276bfebea8741596e8fe9d86070245d9b5f9db6da.elf

Resource

ubuntu2204-amd64-20240729-en

discovery

ubuntu-22.04-amd64

1 signatures

150 seconds

Behavioral task

behavioral15

Sample

script_malware/23.sh

Resource

ubuntu1804-amd64-20240508-en

discovery

ubuntu-18.04-amd64

1 signatures

150 seconds

Behavioral task

behavioral16

Sample

script_malware/23.sh

Resource

debian9-armhf-20240611-en

discovery

debian-9-armhf

1 signatures

150 seconds

Behavioral task

behavioral17

Sample

script_malware/23.sh

Resource

debian9-mipsbe-20240611-en

discovery

debian-9-mips

1 signatures

150 seconds

Behavioral task

behavioral18

Sample

script_malware/23.sh

Resource

debian9-mipsel-20240611-en

discovery

debian-9-mipsel

1 signatures

150 seconds

Behavioral task

behavioral19

Sample

script_malware/404

Resource

ubuntu1804-amd64-20240729-en

discovery

ubuntu-18.04-amd64

1 signatures

150 seconds

Behavioral task

behavioral20

Sample

script_malware/404

Resource

debian9-armhf-20240418-en

discovery

debian-9-armhf

1 signatures

150 seconds

Behavioral task

behavioral21

Sample

script_malware/404

Resource

debian9-mipsbe-20240611-en

discovery

debian-9-mips

1 signatures

150 seconds

Behavioral task

behavioral22

Sample

script_malware/404

Resource

debian9-mipsel-20240226-en

discovery

debian-9-mipsel

1 signatures

150 seconds

Behavioral task

behavioral23

Sample

script_malware/864d7bcd96f8cf35b9e372b6508bc6ef1a704eaaa03c34bd79577b057aebec5b.py

Resource

win7-20240903-en

discovery

windows7-x64

6 signatures

150 seconds

Behavioral task

behavioral24

Sample

script_malware/864d7bcd96f8cf35b9e372b6508bc6ef1a704eaaa03c34bd79577b057aebec5b.py

Resource

win10v2004-20241007-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral25

Sample

script_malware/8e27b76b3903312cc5e93f250d7cf90b7b999592d70dcf2922bb450023014006.sh

Resource

ubuntu1804-amd64-20240611-en

xmrig_linux defense_evasion discovery evasion execution miner persistence privilege_escalatio privilege_escalation rootkit

ubuntu-18.04-amd64

20 signatures

150 seconds

Behavioral task

behavioral26

Sample

script_malware/8e27b76b3903312cc5e93f250d7cf90b7b999592d70dcf2922bb450023014006.sh

Resource

debian9-armhf-20240729-en

defense_evasion discovery evasion privilege_escalation

debian-9-armhf

7 signatures

150 seconds

Behavioral task

behavioral27

Sample

script_malware/8e27b76b3903312cc5e93f250d7cf90b7b999592d70dcf2922bb450023014006.sh

Resource

debian9-mipsbe-20240418-en

defense_evasion discovery execution persistence privilege_escalatio privilege_escalation

debian-9-mips

15 signatures

150 seconds

Behavioral task

behavioral28

Sample

script_malware/8e27b76b3903312cc5e93f250d7cf90b7b999592d70dcf2922bb450023014006.sh

Resource

debian9-mipsel-20240611-en

defense_evasion discovery execution persistence privilege_escalatio privilege_escalation

debian-9-mipsel

10 signatures

150 seconds

Behavioral task

behavioral29

Sample

script_malware/SnOoPy.sh

Resource

ubuntu1804-amd64-20240611-en

defense_evasion discovery

ubuntu-18.04-amd64

2 signatures

150 seconds

Behavioral task

behavioral30

Sample

script_malware/SnOoPy.sh

Resource

debian9-armhf-20240611-en

defense_evasion discovery

debian-9-armhf

2 signatures

150 seconds

Behavioral task

behavioral31

Sample

script_malware/SnOoPy.sh

Resource

debian9-mipsbe-20240729-en

defense_evasion discovery

debian-9-mips

2 signatures

150 seconds

Behavioral task

behavioral32

Sample

script_malware/SnOoPy.sh

Resource

debian9-mipsel-20240418-en

defense_evasion discovery

debian-9-mipsel

2 signatures

150 seconds

Report Analysis Logs

General

Target

script_malware/21162bbd796ad2bf9954265276bfebea8741596e8fe9d86070245d9b5f9db6da.elf
Size

5.1MB
MD5

c850f6816459e3364b2a54239642101b
SHA1

30c60f18279ed5fd36e3ac2d3ba5ddbdc5d1f624
SHA256

21162bbd796ad2bf9954265276bfebea8741596e8fe9d86070245d9b5f9db6da
SHA512

be7eaec0e4847a422ab7b52af7f0493e2390973077500f4faab38cb0dafd9d651346aee13bb9e5a4fb936e3cc3f83c7db598121df37be9ff6cda2dadf59ccb2f
SSDEEP

98304:nxygRxtJ8tcZe32l/+jMSXYTU4BcoPfa8/X:Stc0kbSXWJ

Score

3^/10

discovery

Malware Config

Signatures

System Network Configuration Discovery 1 TTPs 1 IoCs

Adversaries may gather information about the network configuration of a system.

discovery

System Network Configuration Discovery

T1016

pid	Process
1571	21162bbd796ad2bf9954265276bfebea8741596e8fe9d86070245d9b5f9db6da.elf

Processes

/tmp/script_malware/21162bbd796ad2bf9954265276bfebea8741596e8fe9d86070245d9b5f9db6da.elf
/tmp/script_malware/21162bbd796ad2bf9954265276bfebea8741596e8fe9d86070245d9b5f9db6da.elf
1⤵
- System Network Configuration Discovery
PID:1571

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

T1016

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads