Overview
overview
5Static
static
1KaliRELab-...ll.ps1
windows10-2004-x64
3KaliRELab-...ll.ps1
windows11-ltsc_2024-x64
3KaliRELab-...ME.ps1
windows10-2004-x64
3KaliRELab-...ME.ps1
windows11-ltsc_2024-x64
3KaliRELab-...ll.ps1
windows10-2004-x64
3KaliRELab-...ll.ps1
windows11-ltsc_2024-x64
3KaliRELab-...mp.vbs
windows10-2004-x64
5KaliRELab-...mp.vbs
windows11-ltsc_2024-x64
5KaliRELab-...strcmp
ubuntu-18.04-amd64
3KaliRELab-...strcmp
debian-9-armhf
3KaliRELab-...strcmp
debian-9-mips
1KaliRELab-...strcmp
debian-9-mipsel
3KaliRELab-...sas.py
ubuntu-18.04-amd64
3KaliRELab-...sas.py
debian-9-armhf
3KaliRELab-...sas.py
debian-9-mips
3KaliRELab-...sas.py
debian-9-mipsel
3KaliRELab-...age.py
ubuntu-18.04-amd64
3KaliRELab-...age.py
debian-9-armhf
3KaliRELab-...age.py
debian-9-mips
3KaliRELab-...age.py
debian-9-mipsel
3KaliRELab-...ump.py
ubuntu-18.04-amd64
1KaliRELab-...ump.py
debian-9-armhf
1KaliRELab-...ump.py
debian-9-mips
1KaliRELab-...ump.py
debian-9-mipsel
1KaliRELab-...ngs.py
ubuntu-18.04-amd64
3KaliRELab-...ngs.py
debian-9-armhf
3KaliRELab-...ngs.py
debian-9-mips
3KaliRELab-...ngs.py
debian-9-mipsel
3KaliRELab-...dis.py
ubuntu-18.04-amd64
1KaliRELab-...dis.py
debian-9-armhf
1KaliRELab-...dis.py
debian-9-mips
1KaliRELab-...dis.py
debian-9-mipsel
1Analysis
- max time kernel
1s - platform
debian-9_armhf - resource
debian9-armhf-20260513-en - resource tags
arch:armhfimage:debian9-armhf-20260513-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem - submitted
29/10/2026, 19:51
Static task
static1
Behavioral task
behavioral1
Sample
KaliRELab-1.2.2/Install.ps1
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral2
Sample
KaliRELab-1.2.2/Install.ps1
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral3
Sample
KaliRELab-1.2.2/README.ps1
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral4
Sample
KaliRELab-1.2.2/README.ps1
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral5
Sample
KaliRELab-1.2.2/Uninstall.ps1
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral6
Sample
KaliRELab-1.2.2/Uninstall.ps1
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral7
Sample
KaliRELab-1.2.2/analysis/catch-strcmp.vbs
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral8
Sample
KaliRELab-1.2.2/analysis/catch-strcmp.vbs
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral9
Sample
KaliRELab-1.2.2/analysis/catch-vbastrcmp
Resource
ubuntu1804-amd64-20261019-en
ubuntu-18.04-amd64
Behavioral task
behavioral10
Sample
KaliRELab-1.2.2/analysis/catch-vbastrcmp
Resource
debian9-armhf-20260513-en
debian-9-armhf
Behavioral task
behavioral11
Sample
KaliRELab-1.2.2/analysis/catch-vbastrcmp
Resource
debian9-mipsbe-20260513-en
debian-9-mips
Behavioral task
behavioral12
Sample
KaliRELab-1.2.2/analysis/catch-vbastrcmp
Resource
debian9-mipsel-20260513-en
debian-9-mipsel
Behavioral task
behavioral13
Sample
KaliRELab-1.2.2/analysis/disas.py
Resource
ubuntu1804-amd64-20261019-en
ubuntu-18.04-amd64
Behavioral task
behavioral14
Sample
KaliRELab-1.2.2/analysis/disas.py
Resource
debian9-armhf-20260513-en
debian-9-armhf
Behavioral task
behavioral15
Sample
KaliRELab-1.2.2/analysis/disas.py
Resource
debian9-mipsbe-20260513-en
debian-9-mips
Behavioral task
behavioral16
Sample
KaliRELab-1.2.2/analysis/disas.py
Resource
debian9-mipsel-20260513-en
debian-9-mipsel
Behavioral task
behavioral17
Sample
KaliRELab-1.2.2/analysis/dump-wine-image.py
Resource
ubuntu1804-amd64-20261019-en
ubuntu-18.04-amd64
Behavioral task
behavioral18
Sample
KaliRELab-1.2.2/analysis/dump-wine-image.py
Resource
debian9-armhf-20260513-en
debian-9-armhf
Behavioral task
behavioral19
Sample
KaliRELab-1.2.2/analysis/dump-wine-image.py
Resource
debian9-mipsbe-20260513-en
debian-9-mips
Behavioral task
behavioral20
Sample
KaliRELab-1.2.2/analysis/dump-wine-image.py
Resource
debian9-mipsel-20260513-en
debian-9-mipsel
Behavioral task
behavioral21
Sample
KaliRELab-1.2.2/analysis/fix-dump.py
Resource
ubuntu1804-amd64-20261019-en
ubuntu-18.04-amd64
Behavioral task
behavioral22
Sample
KaliRELab-1.2.2/analysis/fix-dump.py
Resource
debian9-armhf-20260513-en
debian-9-armhf
Behavioral task
behavioral23
Sample
KaliRELab-1.2.2/analysis/fix-dump.py
Resource
debian9-mipsbe-20260513-en
debian-9-mips
Behavioral task
behavioral24
Sample
KaliRELab-1.2.2/analysis/fix-dump.py
Resource
debian9-mipsel-20260513-en
debian-9-mipsel
Behavioral task
behavioral25
Sample
KaliRELab-1.2.2/analysis/mem-strings.py
Resource
ubuntu1804-amd64-20261019-en
ubuntu-18.04-amd64
Behavioral task
behavioral26
Sample
KaliRELab-1.2.2/analysis/mem-strings.py
Resource
debian9-armhf-20260513-en
debian-9-armhf
Behavioral task
behavioral27
Sample
KaliRELab-1.2.2/analysis/mem-strings.py
Resource
debian9-mipsbe-20260513-en
debian-9-mips
Behavioral task
behavioral28
Sample
KaliRELab-1.2.2/analysis/mem-strings.py
Resource
debian9-mipsel-20260513-en
debian-9-mipsel
Behavioral task
behavioral29
Sample
KaliRELab-1.2.2/analysis/pcode-dis.py
Resource
ubuntu1804-amd64-20261019-en
ubuntu-18.04-amd64
Behavioral task
behavioral30
Sample
KaliRELab-1.2.2/analysis/pcode-dis.py
Resource
debian9-armhf-20260513-en
debian-9-armhf
Behavioral task
behavioral31
Sample
KaliRELab-1.2.2/analysis/pcode-dis.py
Resource
debian9-mipsbe-20260513-en
debian-9-mips
Behavioral task
behavioral32
Sample
KaliRELab-1.2.2/analysis/pcode-dis.py
Resource
debian9-mipsel-20260513-en
debian-9-mipsel
General
- Target KaliRELab-1.2.2/analysis/catch-vbastrcmp
- Size 2KB
- Sample261029-yk1f8aev2y
- SHA256 15991cdf1fefdce90cacfaeccfeaeb3268384e05a34e0893852106e79954bb25
- MD5 b6939968104015a80147d4ba2f65ea51
- SHA1 59e030f9972d023d72f5b447dec49aaa6608ebe7
- SHA512 31c03957345fcf0dbcc74f4446a5cedb24baae2865b6aea53da8d8cb7e2d08222c7186e1d7b0379ce0c983bc71977fe3fccf30ca8e6c253e7c01c28818e65d31
- TLSH T17851D855B14981BD866504E5014EE9066B07DBAF1310B9383C9EDA9CEFB04329E772FB
- MD5 SHA1 SHA512 TLSH
Malware Config
Signatures
- Writes file to tmp directory 2 IoCs
Malware often drops required files in the /tmp directory.
description ioc Process File opened for modification /tmp/sh-thd.dOL0Ge catch-vbastrcmp File opened for modification /tmp/catch-gen.gdb catch-vbastrcmp
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /tmp/sh-thd.dOL0Ge
- Size 1KB
- SHA256 9e36e8441fd19d0f6a951a4f0625bac1d9ee9b650dd61aa19930b45b3a9665e1
- MD5 f54cfbd91d4ffbb287340834401c1f76
- SHA1 45d0740f54d10712f09a8851e3a2b0e206e4faf9
- SHA512 b8532a419a9ae3d51ad1341e94c8a8b2ae315214d16cd2482822321789fb6b70aa03a4f26b7a9c7459ad143ecceca76f7d952eb4e6013249c47f8ba42b30ac74
- TLSH T122316349A04984EE811904E4411DE4053F22EE9F155075383DDEC7DCDFA00319BB327F
- MD5 SHA1 SHA512 TLSH