Overview
overview
10Static
static
10a46aab76
ubuntu-22.04-amd64
4chme
ubuntu-22.04-amd64
4isots
ubuntu-24.04-amd64
6mctes
ubuntu-18.04-amd64
1mswc
ubuntu-24.04-amd64
1netstat.gz
windows7-x64
1netstat.gz
windows10-2004-x64
1blue_helper
ubuntu-20.04-amd64
10kerndiacet
ubuntu-24.04-amd64
10systemctl
ubuntu-24.04-amd64
3uptime
ubuntu-22.04-amd64
3w
ubuntu-22.04-amd64
3node1
ubuntu-22.04-amd64
1pasuspende
ubuntu-18.04-amd64
6pasuspende
debian-9-armhf
6pasuspende
debian-9-mips
6pasuspende
debian-9-mipsel
6systemctl
ubuntu-18.04-amd64
1uptime
ubuntu-24.04-amd64
3w
ubuntu-24.04-amd64
3Analysis
-
max time kernel
0s -
max time network
130s -
platform
ubuntu-24.04_amd64 -
resource
ubuntu2404-amd64-20250307-en -
resource tags
arch:amd64arch:i386image:ubuntu2404-amd64-20250307-enkernel:6.8.0-31-genericlocale:en-usos:ubuntu-24.04-amd64system -
submitted
19/03/2025, 06:15
Behavioral task
behavioral1
Sample
a46aab76
Resource
ubuntu2204-amd64-20250307-en
Behavioral task
behavioral2
Sample
chme
Resource
ubuntu2204-amd64-20250307-en
Behavioral task
behavioral3
Sample
isots
Resource
ubuntu2404-amd64-20250307-en
Behavioral task
behavioral4
Sample
mctes
Resource
ubuntu1804-amd64-20240729-en
Behavioral task
behavioral5
Sample
mswc
Resource
ubuntu2404-amd64-20250307-en
Behavioral task
behavioral6
Sample
netstat.gz
Resource
win7-20240903-en
Behavioral task
behavioral7
Sample
netstat.gz
Resource
win10v2004-20250314-en
Behavioral task
behavioral8
Sample
blue_helper
Resource
ubuntu2004-amd64-20241127-en
Behavioral task
behavioral9
Sample
kerndiacet
Resource
ubuntu2404-amd64-20250307-en
Behavioral task
behavioral10
Sample
systemctl
Resource
ubuntu2404-amd64-20250307-en
Behavioral task
behavioral11
Sample
uptime
Resource
ubuntu2204-amd64-20250307-en
Behavioral task
behavioral12
Sample
w
Resource
ubuntu2204-amd64-20250307-en
Behavioral task
behavioral13
Sample
node1
Resource
ubuntu2204-amd64-20250307-en
Behavioral task
behavioral14
Sample
pasuspende
Resource
ubuntu1804-amd64-20240508-en
Behavioral task
behavioral15
Sample
pasuspende
Resource
debian9-armhf-20240729-en
Behavioral task
behavioral16
Sample
pasuspende
Resource
debian9-mipsbe-20240611-en
Behavioral task
behavioral17
Sample
pasuspende
Resource
debian9-mipsel-20240226-en
Behavioral task
behavioral18
Sample
systemctl
Resource
ubuntu1804-amd64-20240611-en
Behavioral task
behavioral19
Sample
uptime
Resource
ubuntu2404-amd64-20250307-en
Behavioral task
behavioral20
Sample
w
Resource
ubuntu2404-amd64-20250307-en
General
-
Target
w
-
Size
1.3MB
-
MD5
ef05690556c20a3cb64227693f2c9ac1
-
SHA1
563989d7787bc2e7c16636e3a9204c1a2edfca50
-
SHA256
94c89c4417538bd1aae2e4887a495b90a53e37634ce87a4860647bda8b6ef193
-
SHA512
fee165013ce7fe496d07efa2ccecf139fad50825edb57f7de13e90ec38f1cf540c4fd3f8995a49cdaf3eab96c470984f2f844f3ca78d8a05724b650cc376c479
-
SSDEEP
24576:hUv+TVGHRJNZxvGQihrwTSBZBSOXDZApX:ha+TVGLNZYQihrwTSBZIOXD
Malware Config
Signatures
-
description ioc Process File opened for reading /proc/self/maps awk File opened for reading /proc/self/maps awk File opened for reading /proc/self/maps awk File opened for reading /proc/filesystems sed
Processes
-
/tmp/w/tmp/w1⤵PID:2540
-
/bin/bash/bin/bash /dev/fd/31⤵PID:2540
-
/usr/bin/datedate "+%T"2⤵PID:2543
-
-
/usr/bin/wcwc -l2⤵PID:2546
-
-
/usr/bin/whowho2⤵PID:2545
-
-
/usr/bin/awkawk "-F[a-z]:" "{ print \$2 }"2⤵
- Reads runtime system information
PID:2549
-
-
/usr/bin/awkawk "-F, " "{print \$1, \$2, \$3}"2⤵
- Reads runtime system information
PID:2550
-
-
/usr/bin/awkawk "{print \$3 \" \" \$4 , \$5}"2⤵
- Reads runtime system information
PID:2553
-
-
/usr/bin/sedsed "1,2d"2⤵
- Reads runtime system information
PID:2555
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1B
MD568b329da9893e34099c7d8ad5cb9c940
SHA1adc83b19e793491b1c6ea0fd8b46cd9f32e592fc
SHA25601ba4719c80b6fe911b091a7c05124b64eeece964e09c058ef8f9805daca546b
SHA512be688838ca8686e5c90689bf2ab585cef1137c999b48c70b92f67a5c34dc15697b5d11c982ed6d71be1e1e7f7b4e0733884aa97c3f7a339a8ed03577cf74be09