Analysis
- max time kernel
3s - platform
debian-9_mipsel - resource
debian9-mipsel-20260513-en - resource tags
- submitted
25/06/2026, 16:44
General
- Target Ingram-Pro-main/IngramPro/lib/DahuaConsole/eventviewer.py
- Size 862B
- Sample260625-t8v47adv21
- SHA256 159fff0807f0e54f6ab195461f53f8f6067ec307bc7091b9dea3192a4a5368cf
Score
3/10
Malware Config
Signatures
- Command and Scripting Interpreter: Python 1 TTPs 4 IoCs
Execution via Python.
- Writes file to tmp directory 1 IoCs
Malware often drops required files in the /tmp directory.
Processes
-
/tmp/Ingram-Pro-main/IngramPro/lib/DahuaConsole/eventviewer.py/tmp/Ingram-Pro-main/IngramPro/lib/DahuaConsole/eventviewer.py1⤵
-
/usr/local/sbin/python3python3 /tmp/Ingram-Pro-main/IngramPro/lib/DahuaConsole/eventviewer.py1⤵
- Command and Scripting Interpreter: Python
-
/usr/local/bin/python3python3 /tmp/Ingram-Pro-main/IngramPro/lib/DahuaConsole/eventviewer.py1⤵
- Command and Scripting Interpreter: Python
-
/usr/sbin/python3python3 /tmp/Ingram-Pro-main/IngramPro/lib/DahuaConsole/eventviewer.py1⤵
- Command and Scripting Interpreter: Python
-
/usr/bin/python3python3 /tmp/Ingram-Pro-main/IngramPro/lib/DahuaConsole/eventviewer.py1⤵
- Command and Scripting Interpreter: Python
- Writes file to tmp directory
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
utils.cpython-35.pyc.2004377856