Overview
overview
3Static
static
1app/lp_v3.py
ubuntu-18.04-amd64
1app/lp_v3.py
debian-9-armhf
1app/lp_v3.py
debian-9-mips
1app/lp_v3.py
debian-9-mipsel
1app/start.bat
windows10-2004-x64
3app/start.bat
windows11-ltsc_2024-x64
3app/waterm...ypt.py
ubuntu-18.04-amd64
1app/waterm...ypt.py
debian-9-armhf
1app/waterm...ypt.py
debian-9-mips
1app/waterm...ypt.py
debian-9-mipsel
1Analysis
- max time kernel
0s - max time network
130s - platform
ubuntu-18.04_amd64 - resource
ubuntu1804-amd64-20261019-en - resource tags
arch:amd64arch:i386image:ubuntu1804-amd64-20261019-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system - submitted
04/11/2026, 20:49
Static task
static1
Behavioral task
behavioral1
Sample
app/lp_v3.py
Resource
ubuntu1804-amd64-20261019-en
Behavioral task
behavioral2
Sample
app/lp_v3.py
Resource
debian9-armhf-20260513-en
Behavioral task
behavioral3
Sample
app/lp_v3.py
Resource
debian9-mipsbe-20260513-en
Behavioral task
behavioral4
Sample
app/lp_v3.py
Resource
debian9-mipsel-20260513-en
Behavioral task
behavioral5
Sample
app/start.bat
Resource
win10v2004-20260911-en
Behavioral task
behavioral6
Sample
app/start.bat
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral7
Sample
app/watermark_encrypt.py
Resource
ubuntu1804-amd64-20261019-en
Behavioral task
behavioral8
Sample
app/watermark_encrypt.py
Resource
debian9-armhf-20260513-en
Behavioral task
behavioral9
Sample
app/watermark_encrypt.py
Resource
debian9-mipsbe-20260513-en
Behavioral task
behavioral10
Sample
app/watermark_encrypt.py
Resource
debian9-mipsel-20260513-en
General
- Target app/watermark_encrypt.py
- Size 27KB
- Sample261104-zl346sdt41
- SHA256 07358bd1ac3bf482b9fae2198130408b7d73dc45702ccedaf4880980954f8561
- MD5 c58dcc913d5b93a2736dd203b030114a
- SHA1 3c3ec0384984d306768c647a43a0b23a5b99725b
- SHA512 5cc821341978d4c245a7c5546207e747f1126209b4766924d0fe1f81a5364f203ed7211537895cdc5871d14b829e3e2019373070a9e27670e0fc97f65b670cf8
- SSDEEP 384:uxIyr61JZ1vnFgUytdHxeqenp7UBLsWARE8BjewnrbUtXrtMFkkWPU+ml1N029ba:uxIyr61JZ1UtIwAZ8rtMFJL+mDNrm
- TLSH T1A8D2C76ACC1A79634273D61CAD63D403F72913276A2669137EACD7483FB4460E26CF9C
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
Processes
-
/tmp/app/watermark_encrypt.py/tmp/app/watermark_encrypt.py1⤵PID:1553
-
/usr/local/sbin/python3"python3 " /tmp/app/watermark_encrypt.py1⤵PID:1553
-
/usr/local/bin/python3"python3 " /tmp/app/watermark_encrypt.py1⤵PID:1553
-
/usr/sbin/python3"python3 " /tmp/app/watermark_encrypt.py1⤵PID:1553
-
/usr/bin/python3"python3 " /tmp/app/watermark_encrypt.py1⤵PID:1553
-
/sbin/python3"python3 " /tmp/app/watermark_encrypt.py1⤵PID:1553
-
/bin/python3"python3 " /tmp/app/watermark_encrypt.py1⤵PID:1553
-
/snap/bin/python3"python3 " /tmp/app/watermark_encrypt.py1⤵PID:1553