78276bd481a04c29109fbbd8313701e5b814165fa4b48515ec4489ccfda93107

Submit
Reports

Overview

overview

Static

static

script_mal...6c1.sh

ubuntu-18.04-amd64

script_mal...6c1.sh

debian-9-armhf

script_mal...6c1.sh

debian-9-mips

script_mal...6c1.sh

debian-9-mipsel

script_malware/1.sh

ubuntu-18.04-amd64

script_malware/1.sh

debian-9-armhf

script_malware/1.sh

debian-9-mips

script_malware/1.sh

debian-9-mipsel

script_mal...459.sh

ubuntu-18.04-amd64

script_mal...459.sh

debian-9-armhf

script_mal...459.sh

debian-9-mips

script_mal...459.sh

debian-9-mipsel

script_mal...ux.elf

ubuntu-22.04-amd64

script_mal...da.elf

ubuntu-22.04-amd64

script_malware/23.sh

ubuntu-18.04-amd64

script_malware/23.sh

debian-9-armhf

script_malware/23.sh

debian-9-mips

script_malware/23.sh

debian-9-mipsel

script_malware/404

ubuntu-18.04-amd64

script_malware/404

debian-9-armhf

script_malware/404

debian-9-mips

script_malware/404

debian-9-mipsel

script_mal...c5b.py

windows7-x64

script_mal...c5b.py

windows10-2004-x64

script_mal...006.sh

ubuntu-18.04-amd64

script_mal...006.sh

debian-9-armhf

script_mal...006.sh

debian-9-mips

script_mal...006.sh

debian-9-mipsel

script_mal...oPy.sh

ubuntu-18.04-amd64

script_mal...oPy.sh

debian-9-armhf

script_mal...oPy.sh

debian-9-mips

script_mal...oPy.sh

debian-9-mipsel

Analysis

max time kernel
25s
platform
debian-9_mips
resource
debian9-mipsbe-20240611-en
resource tags

arch:mipsimage:debian9-mipsbe-20240611-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipssystem
submitted
06-12-2024 14:06

Sharing

Copy URL

Twitter E-mail

Static task

static1

Behavioral task

behavioral1

Sample

script_malware/063ccf736c2c19ca5db70b8d8a7cf00377899c16023c63fee836bdefadd336c1.sh

Resource

ubuntu1804-amd64-20240611-en

ubuntu-18.04-amd64

13 signatures

150 seconds

Behavioral task

behavioral2

Sample

script_malware/063ccf736c2c19ca5db70b8d8a7cf00377899c16023c63fee836bdefadd336c1.sh

Resource

debian9-armhf-20240611-en

antivm defense_evasion discovery exection execution persistence privilege_escalatio privilege_escalation

debian-9-armhf

13 signatures

150 seconds

Behavioral task

behavioral3

Sample

script_malware/063ccf736c2c19ca5db70b8d8a7cf00377899c16023c63fee836bdefadd336c1.sh

Resource

debian9-mipsbe-20240611-en

defense_evasion discovery exection execution persistence privilege_escalatio privilege_escalation

debian-9-mips

12 signatures

150 seconds

Behavioral task

behavioral4

Sample

script_malware/063ccf736c2c19ca5db70b8d8a7cf00377899c16023c63fee836bdefadd336c1.sh

Resource

debian9-mipsel-20240226-en

defense_evasion discovery exection execution persistence privilege_escalatio privilege_escalation

debian-9-mipsel

12 signatures

150 seconds

Behavioral task

behavioral5

Sample

script_malware/1.sh

Resource

ubuntu1804-amd64-20240611-en

xmrig_linux defense_evasion discovery evasion execution miner persistence privilege_escalatio privilege_escalation rootkit

ubuntu-18.04-amd64

20 signatures

150 seconds

Behavioral task

behavioral6

Sample

script_malware/1.sh

Resource

debian9-armhf-20240418-en

defense_evasion discovery evasion privilege_escalation

debian-9-armhf

7 signatures

150 seconds

Behavioral task

behavioral7

Sample

script_malware/1.sh

Resource

debian9-mipsbe-20240611-en

defense_evasion discovery execution persistence privilege_escalatio privilege_escalation

debian-9-mips

10 signatures

150 seconds

Behavioral task

behavioral8

Sample

script_malware/1.sh

Resource

debian9-mipsel-20240611-en

defense_evasion discovery execution persistence privilege_escalatio privilege_escalation

debian-9-mipsel

11 signatures

150 seconds

Behavioral task

behavioral9

Sample

script_malware/10c3b6b03a9bf105d264a8e7f30dcab0a6c59a414529b0af0a6bd9f1d2984459.sh

Resource

ubuntu1804-amd64-20240729-en

defense_evasion discovery

ubuntu-18.04-amd64

5 signatures

150 seconds

Behavioral task

behavioral10

Sample

script_malware/10c3b6b03a9bf105d264a8e7f30dcab0a6c59a414529b0af0a6bd9f1d2984459.sh

Resource

debian9-armhf-20240418-en

defense_evasion discovery

debian-9-armhf

5 signatures

150 seconds

Behavioral task

behavioral11

Sample

script_malware/10c3b6b03a9bf105d264a8e7f30dcab0a6c59a414529b0af0a6bd9f1d2984459.sh

Resource

debian9-mipsbe-20240611-en

defense_evasion discovery

debian-9-mips

5 signatures

150 seconds

Behavioral task

behavioral12

Sample

script_malware/10c3b6b03a9bf105d264a8e7f30dcab0a6c59a414529b0af0a6bd9f1d2984459.sh

Resource

debian9-mipsel-20240226-en

defense_evasion discovery

debian-9-mipsel

5 signatures

150 seconds

Behavioral task

behavioral13

Sample

script_malware/164f8295_linux.elf

Resource

ubuntu2204-amd64-20240611-en

discovery

ubuntu-22.04-amd64

1 signatures

150 seconds

Behavioral task

behavioral14

Sample

script_malware/21162bbd796ad2bf9954265276bfebea8741596e8fe9d86070245d9b5f9db6da.elf

Resource

ubuntu2204-amd64-20240729-en

discovery

ubuntu-22.04-amd64

1 signatures

150 seconds

Behavioral task

behavioral15

Sample

script_malware/23.sh

Resource

ubuntu1804-amd64-20240508-en

discovery

ubuntu-18.04-amd64

1 signatures

150 seconds

Behavioral task

behavioral16

Sample

script_malware/23.sh

Resource

debian9-armhf-20240611-en

discovery

debian-9-armhf

1 signatures

150 seconds

Behavioral task

behavioral17

Sample

script_malware/23.sh

Resource

debian9-mipsbe-20240611-en

discovery

debian-9-mips

1 signatures

150 seconds

Behavioral task

behavioral18

Sample

script_malware/23.sh

Resource

debian9-mipsel-20240611-en

discovery

debian-9-mipsel

1 signatures

150 seconds

Behavioral task

behavioral19

Sample

script_malware/404

Resource

ubuntu1804-amd64-20240729-en

discovery

ubuntu-18.04-amd64

1 signatures

150 seconds

Behavioral task

behavioral20

Sample

script_malware/404

Resource

debian9-armhf-20240418-en

discovery

debian-9-armhf

1 signatures

150 seconds

Behavioral task

behavioral21

Sample

script_malware/404

Resource

debian9-mipsbe-20240611-en

discovery

debian-9-mips

1 signatures

150 seconds

Behavioral task

behavioral22

Sample

script_malware/404

Resource

debian9-mipsel-20240226-en

discovery

debian-9-mipsel

1 signatures

150 seconds

Behavioral task

behavioral23

Sample

script_malware/864d7bcd96f8cf35b9e372b6508bc6ef1a704eaaa03c34bd79577b057aebec5b.py

Resource

win7-20240903-en

discovery

windows7-x64

6 signatures

150 seconds

Behavioral task

behavioral24

Sample

script_malware/864d7bcd96f8cf35b9e372b6508bc6ef1a704eaaa03c34bd79577b057aebec5b.py

Resource

win10v2004-20241007-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral25

Sample

script_malware/8e27b76b3903312cc5e93f250d7cf90b7b999592d70dcf2922bb450023014006.sh

Resource

ubuntu1804-amd64-20240611-en

xmrig_linux defense_evasion discovery evasion execution miner persistence privilege_escalatio privilege_escalation rootkit

ubuntu-18.04-amd64

20 signatures

150 seconds

Behavioral task

behavioral26

Sample

script_malware/8e27b76b3903312cc5e93f250d7cf90b7b999592d70dcf2922bb450023014006.sh

Resource

debian9-armhf-20240729-en

defense_evasion discovery evasion privilege_escalation

debian-9-armhf

7 signatures

150 seconds

Behavioral task

behavioral27

Sample

script_malware/8e27b76b3903312cc5e93f250d7cf90b7b999592d70dcf2922bb450023014006.sh

Resource

debian9-mipsbe-20240418-en

defense_evasion discovery execution persistence privilege_escalatio privilege_escalation

debian-9-mips

15 signatures

150 seconds

Behavioral task

behavioral28

Sample

script_malware/8e27b76b3903312cc5e93f250d7cf90b7b999592d70dcf2922bb450023014006.sh

Resource

debian9-mipsel-20240611-en

defense_evasion discovery execution persistence privilege_escalatio privilege_escalation

debian-9-mipsel

10 signatures

150 seconds

Behavioral task

behavioral29

Sample

script_malware/SnOoPy.sh

Resource

ubuntu1804-amd64-20240611-en

defense_evasion discovery

ubuntu-18.04-amd64

2 signatures

150 seconds

Behavioral task

behavioral30

Sample

script_malware/SnOoPy.sh

Resource

debian9-armhf-20240611-en

defense_evasion discovery

debian-9-armhf

2 signatures

150 seconds

Behavioral task

behavioral31

Sample

script_malware/SnOoPy.sh

Resource

debian9-mipsbe-20240729-en

defense_evasion discovery

debian-9-mips

2 signatures

150 seconds

Behavioral task

behavioral32

Sample

script_malware/SnOoPy.sh

Resource

debian9-mipsel-20240418-en

defense_evasion discovery

debian-9-mipsel

2 signatures

150 seconds

Errors

Reason

Payload did not run: elf interpreter '/usr/bin/perl\r' not found

Report Analysis Logs

General

Target

script_malware/404
Size

26KB
MD5

e53cf00cf16d5e645103a266959ce5b7
SHA1

d145edc39d2b5ab2392a989734ef28af77f74f7e
SHA256

0fb9eb96a08f9ad3400f89749d32f3e44362346ec7fca9bd5e9ba85022e5ebc1
SHA512

30b31e6b89f8f1eb92de62a2ba90ab299e060e11a91ef069927f045506dc73d0a276adf3966b4525164488bc8779b4a1a48f005513d9ba9f92916d04ec26f50a
SSDEEP

192:phe97oGORlRQ4CR1ydi5DAomxCdsjnbP19+9Uc3gHNgWW1kSNPWW0wnENfICSo4M:iWBLZCRwdkzzsjT1TtE1dIfICSoTx9k2

Score

3^/10

discovery

Malware Config

Signatures

System Network Configuration Discovery 1 TTPs 1 IoCs

Adversaries may gather information about the network configuration of a system.

discovery

System Network Configuration Discovery

T1016

pid	Process
715	404

Processes

/tmp/script_malware/404
/tmp/script_malware/404
1⤵
- System Network Configuration Discovery
PID:715

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

T1016

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

Errors

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads