Analysis
- max time kernel
1s - platform
debian-9_armhf - resource
debian9-armhf-20260513-en - resource tags
arch:armhfimage:debian9-armhf-20260513-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem - submitted
15/08/2026, 23:17
Static task
static1
Behavioral task
behavioral1
Sample
youtube-watcher-1.0.0/scripts/get_transcript.py
Resource
ubuntu1804-amd64-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
youtube-watcher-1.0.0/scripts/get_transcript.py
Resource
debian9-armhf-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral3
Sample
youtube-watcher-1.0.0/scripts/get_transcript.py
Resource
debian9-mipsbe-20260513-en
2 signatures
150 seconds
General
- Target youtube-watcher-1.0.0/scripts/get_transcript.py
- Size 2KB
- Sample260815-294rqaab73
- SHA256 cebc75a5500cf26a5eb9056bce47ca6ce2278111e12902053a3405abac441042
- MD5 54ac091a7ea480caef27a649665d6f3a
- SHA1 36c06e0974b92f4bcd639c99f29de62c347e2d3a
- SHA512 f072edaf128c3333e6bf8f746b566d55b121e8216f4c64df6d054962e4366dfc2cb0fb01bbf5dc613727201b095ad3f405362fa11d8b019a2bdd177c876cd579
- TLSH T1A041E115C85868C1C7D390BE7AC9A4A15229AD231914AC34FAECC59C3F8433ED6F69FD
- MD5 SHA1 SHA512 TLSH
Malware Config
Signatures
-
pid Process 643 python3 643 python3 643 python3 643 python3 - System Network Configuration Discovery 1 TTPs 5 IoCs
Adversaries may gather information about the network configuration of a system.
pid Process 643 python3 643 python3 643 get_transcript.py 643 python3 643 python3
Processes
-
/tmp/youtube-watcher-1.0.0/scripts/get_transcript.py/tmp/youtube-watcher-1.0.0/scripts/get_transcript.py1⤵
- System Network Configuration Discovery
PID:643
-
/usr/local/sbin/python3python3 /tmp/youtube-watcher-1.0.0/scripts/get_transcript.py1⤵
- Command and Scripting Interpreter: Python
- System Network Configuration Discovery
PID:643
-
/usr/local/bin/python3python3 /tmp/youtube-watcher-1.0.0/scripts/get_transcript.py1⤵
- Command and Scripting Interpreter: Python
- System Network Configuration Discovery
PID:643
-
/usr/sbin/python3python3 /tmp/youtube-watcher-1.0.0/scripts/get_transcript.py1⤵
- Command and Scripting Interpreter: Python
- System Network Configuration Discovery
PID:643
-
/usr/bin/python3python3 /tmp/youtube-watcher-1.0.0/scripts/get_transcript.py1⤵
- Command and Scripting Interpreter: Python
- System Network Configuration Discovery
PID:643