Overview
overview
10Static
static
10a46aab76
ubuntu-22.04-amd64
4chme
ubuntu-22.04-amd64
4isots
ubuntu-24.04-amd64
6mctes
ubuntu-18.04-amd64
1mswc
ubuntu-24.04-amd64
1netstat.gz
windows7-x64
1netstat.gz
windows10-2004-x64
1blue_helper
ubuntu-20.04-amd64
10kerndiacet
ubuntu-24.04-amd64
10systemctl
ubuntu-24.04-amd64
3uptime
ubuntu-22.04-amd64
3w
ubuntu-22.04-amd64
3node1
ubuntu-22.04-amd64
1pasuspende
ubuntu-18.04-amd64
6pasuspende
debian-9-armhf
6pasuspende
debian-9-mips
6pasuspende
debian-9-mipsel
6systemctl
ubuntu-18.04-amd64
1uptime
ubuntu-24.04-amd64
3w
ubuntu-24.04-amd64
3Analysis
-
max time kernel
0s -
max time network
132s -
platform
ubuntu-24.04_amd64 -
resource
ubuntu2404-amd64-20250307-en -
resource tags
arch:amd64arch:i386image:ubuntu2404-amd64-20250307-enkernel:6.8.0-31-genericlocale:en-usos:ubuntu-24.04-amd64system -
submitted
19/03/2025, 06:15
Behavioral task
behavioral1
Sample
a46aab76
Resource
ubuntu2204-amd64-20250307-en
Behavioral task
behavioral2
Sample
chme
Resource
ubuntu2204-amd64-20250307-en
Behavioral task
behavioral3
Sample
isots
Resource
ubuntu2404-amd64-20250307-en
Behavioral task
behavioral4
Sample
mctes
Resource
ubuntu1804-amd64-20240729-en
Behavioral task
behavioral5
Sample
mswc
Resource
ubuntu2404-amd64-20250307-en
Behavioral task
behavioral6
Sample
netstat.gz
Resource
win7-20240903-en
Behavioral task
behavioral7
Sample
netstat.gz
Resource
win10v2004-20250314-en
Behavioral task
behavioral8
Sample
blue_helper
Resource
ubuntu2004-amd64-20241127-en
Behavioral task
behavioral9
Sample
kerndiacet
Resource
ubuntu2404-amd64-20250307-en
Behavioral task
behavioral10
Sample
systemctl
Resource
ubuntu2404-amd64-20250307-en
Behavioral task
behavioral11
Sample
uptime
Resource
ubuntu2204-amd64-20250307-en
Behavioral task
behavioral12
Sample
w
Resource
ubuntu2204-amd64-20250307-en
Behavioral task
behavioral13
Sample
node1
Resource
ubuntu2204-amd64-20250307-en
Behavioral task
behavioral14
Sample
pasuspende
Resource
ubuntu1804-amd64-20240508-en
Behavioral task
behavioral15
Sample
pasuspende
Resource
debian9-armhf-20240729-en
Behavioral task
behavioral16
Sample
pasuspende
Resource
debian9-mipsbe-20240611-en
Behavioral task
behavioral17
Sample
pasuspende
Resource
debian9-mipsel-20240226-en
Behavioral task
behavioral18
Sample
systemctl
Resource
ubuntu1804-amd64-20240611-en
Behavioral task
behavioral19
Sample
uptime
Resource
ubuntu2404-amd64-20250307-en
Behavioral task
behavioral20
Sample
w
Resource
ubuntu2404-amd64-20250307-en
General
-
Target
uptime
-
Size
1.3MB
-
MD5
3360733db8c342e4e27c386e439f19fd
-
SHA1
d0eb93bcf9e275455fdb3f413c9bff0798175f7e
-
SHA256
f3bf42a350f7ee3632cb7de5429d4788c685c6a8df5c8ff7016ddcef26c58756
-
SHA512
f7d3c3dd3efa669ca7f8398d9f65a6b584119b86f2a27f0c9fb422f9170972dd9b54897614d3585f7b8ccb89dbe479636010897b92e86f73affe7c9d07f9a842
-
SSDEEP
24576:k/MVGU9AEwutWTdz+1MSUNaFLNS1SuSSVCI0:kUoQAEw3Tdz+1MSUN+LNCr
Malware Config
Signatures
-
description ioc Process File opened for reading /proc/self/maps awk File opened for reading /proc/self/maps awk File opened for reading /proc/self/maps awk
Processes
-
/tmp/uptime/tmp/uptime1⤵PID:2547
-
/bin/bash/bin/bash /dev/fd/31⤵PID:2547
-
/usr/bin/datedate "+%T"2⤵PID:2550
-
-
/usr/bin/awkawk "-F[a-z]:" "{ print \$2 }"2⤵
- Reads runtime system information
PID:2553
-
-
/usr/bin/awkawk "-F, " "{print \$1, \$2, \$3}"2⤵
- Reads runtime system information
PID:2554
-
-
/usr/bin/wcwc -l2⤵PID:2557
-
-
/usr/bin/whowho2⤵PID:2556
-
-
/usr/bin/awkawk "{print \$3 \" \" \$4 \" \" \$5 \" \" \$6}"2⤵
- Reads runtime system information
PID:2560
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3B
MD52c744dffd279d7e9e0910ce594eb4f4f
SHA19aa23bb69d6a07ff8bac5ee2f86f600939ed47b7
SHA2568855c6119660c614d285554e51769066e94fcb75ff215ccc2fa6b4838b18756b
SHA512273f657f512693340d8d1f1f5a257ae7bb676f7e9887b9b79e15ab0084ee9c0562e3a93153762480522168867eff2acc0a4ce22406a18cd84382f8498a78369a