Overview
overview
3Static
static
1Ingram-Pro-main.zip
windows10-2004-x64
1Ingram-Pro-main.zip
windows11-ltsc_2024-x64
1Ingram-Pro...ole.py
ubuntu-18.04-amd64
3Ingram-Pro...ole.py
debian-9-armhf
3Ingram-Pro...ole.py
debian-9-mips
3Ingram-Pro...ole.py
debian-9-mipsel
3Ingram-Pro...wer.py
ubuntu-18.04-amd64
3Ingram-Pro...wer.py
debian-9-armhf
3Ingram-Pro...wer.py
debian-9-mips
3Ingram-Pro...wer.py
debian-9-mipsel
3Ingram-Pro...net.py
windows10-2004-x64
3Ingram-Pro...net.py
windows11-ltsc_2024-x64
3Ingram-Pro...ord.py
windows10-2004-x64
3Ingram-Pro...ord.py
windows11-ltsc_2024-x64
3Ingram-Pro...can.py
windows10-2004-x64
3Ingram-Pro...can.py
windows11-ltsc_2024-x64
3Ingram-Pro...pro.py
ubuntu-18.04-amd64
3Ingram-Pro...pro.py
debian-9-armhf
3Ingram-Pro...pro.py
debian-9-mips
3Ingram-Pro...pro.py
debian-9-mipsel
3Analysis
- max time kernel
0s - max time network
66s - platform
ubuntu-18.04_amd64 - resource
ubuntu1804-amd64-20260513-en - resource tags
arch:amd64arch:i386image:ubuntu1804-amd64-20260513-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system - submitted
25/06/2026, 16:44
Static task
static1
Behavioral task
behavioral1
Sample
Ingram-Pro-main.zip
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
Ingram-Pro-main.zip
Resource
win11ltsc2024-20260618-en
Behavioral task
behavioral3
Sample
Ingram-Pro-main/IngramPro/lib/DahuaConsole/Console.py
Resource
ubuntu1804-amd64-20260513-en
Behavioral task
behavioral4
Sample
Ingram-Pro-main/IngramPro/lib/DahuaConsole/Console.py
Resource
debian9-armhf-20260513-en
Behavioral task
behavioral5
Sample
Ingram-Pro-main/IngramPro/lib/DahuaConsole/Console.py
Resource
debian9-mipsbe-20260513-en
Behavioral task
behavioral6
Sample
Ingram-Pro-main/IngramPro/lib/DahuaConsole/Console.py
Resource
debian9-mipsel-20260513-en
Behavioral task
behavioral7
Sample
Ingram-Pro-main/IngramPro/lib/DahuaConsole/eventviewer.py
Resource
ubuntu1804-amd64-20260513-en
Behavioral task
behavioral8
Sample
Ingram-Pro-main/IngramPro/lib/DahuaConsole/eventviewer.py
Resource
debian9-armhf-20260513-en
Behavioral task
behavioral9
Sample
Ingram-Pro-main/IngramPro/lib/DahuaConsole/eventviewer.py
Resource
debian9-mipsbe-20260513-en
Behavioral task
behavioral10
Sample
Ingram-Pro-main/IngramPro/lib/DahuaConsole/eventviewer.py
Resource
debian9-mipsel-20260513-en
Behavioral task
behavioral11
Sample
Ingram-Pro-main/IngramPro/lib/DahuaConsole/net.py
Resource
win10v2004-20260513-en
Behavioral task
behavioral12
Sample
Ingram-Pro-main/IngramPro/lib/DahuaConsole/net.py
Resource
win11ltsc2024-20260618-en
Behavioral task
behavioral13
Sample
Ingram-Pro-main/IngramPro/pocs/geovision-weak-password.py
Resource
win10v2004-20260513-en
Behavioral task
behavioral14
Sample
Ingram-Pro-main/IngramPro/pocs/geovision-weak-password.py
Resource
win11ltsc2024-20260617-en
Behavioral task
behavioral15
Sample
Ingram-Pro-main/IngramPro/utils/port_scan.py
Resource
win10v2004-20260513-en
Behavioral task
behavioral16
Sample
Ingram-Pro-main/IngramPro/utils/port_scan.py
Resource
win11ltsc2024-20260617-en
Behavioral task
behavioral17
Sample
Ingram-Pro-main/run_ingram_pro.py
Resource
ubuntu1804-amd64-20260513-en
Behavioral task
behavioral18
Sample
Ingram-Pro-main/run_ingram_pro.py
Resource
debian9-armhf-20260513-en
Behavioral task
behavioral19
Sample
Ingram-Pro-main/run_ingram_pro.py
Resource
debian9-mipsbe-20260513-en
Behavioral task
behavioral20
Sample
Ingram-Pro-main/run_ingram_pro.py
Resource
debian9-mipsel-20260513-en
General
- Target Ingram-Pro-main/IngramPro/lib/DahuaConsole/Console.py
- Size 32KB
- Sample260625-t8v47adv21
- SHA256 3891be570cde1c0f4b8b651cfa946be065d0de1d39ab3920a9d661c107b5081c
- MD5 9af2cd355eeec75e5274dd02cdf351b2
- SHA1 01096f5561a0fb9e5e56f4f1da2d7b57de3d172e
- SHA512 2f238c336dfde518c02147d5641dbd50f4ebe941f2089f75b29a202a3f668eb17843e57e0fde22a1e5b42319dded36704b392d4558d38224bedd6cc642011421
- SSDEEP 768:+6GZgRHrHfBuvDIk3wh2gMh6H1uCsbIOsC/1nK+oxXrH6flPGgoxGfWiKGGxKeb1:+6GZgRHrHfBuvDIk3wAtMH1uCsbnnixP
- TLSH T1C7E24266A96F8463D267441E88DFB803131A2C0B545C3934BE7C53A43FC896DA2F5FB9
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
-
pid Process 1536 python3 1536 python3 1536 python3 1536 python3 - Writes file to tmp directory 1 IoCs
Malware often drops required files in the /tmp directory.
description ioc Process File opened for modification /tmp/Ingram-Pro-main/IngramPro/lib/DahuaConsole/__pycache__/utils.cpython-36.pyc.140456446277944 python3
Processes
-
/tmp/Ingram-Pro-main/IngramPro/lib/DahuaConsole/Console.py/tmp/Ingram-Pro-main/IngramPro/lib/DahuaConsole/Console.py1⤵PID:1536
-
/usr/local/sbin/python3python3 /tmp/Ingram-Pro-main/IngramPro/lib/DahuaConsole/Console.py1⤵
- Command and Scripting Interpreter: Python
PID:1536
-
/usr/local/bin/python3python3 /tmp/Ingram-Pro-main/IngramPro/lib/DahuaConsole/Console.py1⤵
- Command and Scripting Interpreter: Python
PID:1536
-
/usr/sbin/python3python3 /tmp/Ingram-Pro-main/IngramPro/lib/DahuaConsole/Console.py1⤵
- Command and Scripting Interpreter: Python
PID:1536
-
/usr/bin/python3python3 /tmp/Ingram-Pro-main/IngramPro/lib/DahuaConsole/Console.py1⤵
- Command and Scripting Interpreter: Python
- Writes file to tmp directory
PID:1536
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /tmp/Ingram-Pro-main/IngramPro/lib/DahuaConsole/__pycache__/utils.cpython-36.pyc.140456446277944
- Size 4KB
- SHA256 354527034ca8c79aff08ce1e851b4c71359478f1f23327eaef7540b8c3cf608c
- MD5 e22e660ba974a684dd4e35f294ad04b2
- SHA1 501c2e0429cfb23cadd2d294d8f880f3f5254a69
- SHA512 69c4a9ea36ad7782606607c2973054d5dbe301c1f0e910dac180ace499a16d80b03aa86a5edb4057d9292d6448902ac1df31e328b184685670ccf0c42215e2e3
- SSDEEP 96:HB3fWe3dqmhz2pw7MvaGURXcbW6ZD9cE6u4behry0I8jyp:Hpue3dqEY3vaGVy6ZoZ0ryJ8jM
- TLSH T1ACA1A5D3AF028C8AFD60B4BC703963606B74D1B7277983D2410891FA1E598D5AA7B99C
- MD5 SHA1 SHA512 SSDEEP TLSH