82e560a078cd7bb4472d5af832a04c4bc8f1001bac97b1574efe9863d3f66550

Resubmissions

13-01-2025 11:25

250113-nje4sasnhl 3

13-01-2025 01:53

250113-ca7a5asnhk 10

Analysis

max time kernel
0s
platform
debian-9_armhf
resource
debian9-armhf-20240611-en
resource tags

arch:armhfimage:debian9-armhf-20240611-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem
submitted
13-01-2025 11:25

Sharing

Copy URL

Twitter E-mail

Reason

Payload did not run: payload error: fork/exec /tmp/babuk_builder.zip: exec format error

Report Analysis Logs

General

Target

babuk_builder.zip
Size

4.8MB
MD5

aee27a5ebedadf12beed294f59026162
SHA1

fa5153b6011c578ce85c8c6d2a431ee9b8be03ec
SHA256

82e560a078cd7bb4472d5af832a04c4bc8f1001bac97b1574efe9863d3f66550
SHA512

74548443d979e4b07904ca6232df1d787fa7481bfb52dfdd0331882cb407ba73c0548ef8544c02ed2cb2d11401ae86c546875db4408127d30b862cb383da921a
SSDEEP

98304:a7TUPOmgWEeBcQVltn58PsCYBy7PJUhfTJ2RMOMA8vNFDf8NCE3njOSLQJ0TsYnY:rFgaBcKltnOE7MPJUhLCMhN8NnjBEJYY

Score

3^/10

discovery

Malware Config

Signatures

System Network Configuration Discovery 1 TTPs 1 IoCs

Adversaries may gather information about the network configuration of a system.

discovery

System Network Configuration Discovery

T1016

pid	Process
641	babuk_builder.zip

/tmp/babuk_builder.zip
/tmp/babuk_builder.zip cmd /c "%SIGILL%" "\"SIGTERM|DELETE|SIGKILL\""
1⤵
- System Network Configuration Discovery
PID:641

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

T1016

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Resubmissions

Analysis

Sharing

Errors

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads