Analysis

  • max time kernel
    149s
  • max time network
    7s
  • platform
    ubuntu-22.04_amd64
  • resource
    ubuntu2204-amd64-20240611-en
  • resource tags

    arch:amd64arch:i386image:ubuntu2204-amd64-20240611-enkernel:5.15.0-105-genericlocale:en-usos:ubuntu-22.04-amd64system
  • submitted
    17/02/2025, 18:23

General

  • Target

    Linux-Malware-Samples-main/0b22cdc1b1b1f944e4ca8fced2e234d14aeeef830970e8ae7491cbdcb3e11460

  • Size

    13KB

  • MD5

    3871cfbee9b6fab4d7cf65cd18a1353a

  • SHA1

    52e8d2e4fe038698879a9dc13d7324e575266b27

  • SHA256

    0b22cdc1b1b1f944e4ca8fced2e234d14aeeef830970e8ae7491cbdcb3e11460

  • SHA512

    507f14d02a90fa38d79cb80d9722cc8d2ef5803666811f22d17954cfb10338d849f4e6b441aca3539a547570bd04efb6f45b90546cc37077d9a54eec34e28a2a

  • SSDEEP

    192:GQIs/9FmdojAEl1bFf1VWdhsq5OT3KPoS:/5/9F6WjFNEdGq

Score
7/10

Malware Config

Signatures

  • Traces itself 1 IoCs

    Traces itself to prevent debugging attempts

  • Writes file to tmp directory 1 IoCs

    Malware often drops required files in the /tmp directory.

Processes

  • /tmp/Linux-Malware-Samples-main/0b22cdc1b1b1f944e4ca8fced2e234d14aeeef830970e8ae7491cbdcb3e11460
    /tmp/Linux-Malware-Samples-main/0b22cdc1b1b1f944e4ca8fced2e234d14aeeef830970e8ae7491cbdcb3e11460
    1⤵
    • Traces itself
    • Writes file to tmp directory
    PID:1566

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /tmp/passwd.bak

    Filesize

    2KB

    MD5

    a457803380f9fc302a9a520f258ebf19

    SHA1

    264a387ce526d9ba3d0a98a4beb91d12a9618979

    SHA256

    eab5884c5bda06a680f52dc9f6f89d55e34288ad16e7eea3450b4a761e45e200

    SHA512

    8a715be71963b84fac3099a751462b7850896368250fd318fe6112d2fc0816ba356f03e2de47860a1013bffa1b784b116718985a8e4fc173a795b57ea0cb037f