Overview

overview

3

Static

static

1

Launch_MUL...mp.lnk

windows10-2004-x64

3

Launch_MUL...mp.lnk

windows11-ltsc_2024-x64

3

RUN_LEVELUPDIAG.bat

windows10-2004-x64

3

RUN_LEVELUPDIAG.bat

windows11-ltsc_2024-x64

3

RUN_LEVELUPDIAG.sh

ubuntu-18.04-amd64

1

RUN_LEVELUPDIAG.sh

debian-9-armhf

1

RUN_LEVELUPDIAG.sh

debian-9-mips

1

RUN_LEVELUPDIAG.sh

debian-9-mipsel

1

RUN_ORGO.ps1

windows10-2004-x64

3

RUN_ORGO.ps1

windows11-ltsc_2024-x64

3

RUN_ORGO_UI.bat

windows10-2004-x64

3

RUN_ORGO_UI.bat

windows11-ltsc_2024-x64

3

adapters/diag-step.js

windows10-2004-x64

3

adapters/diag-step.js

windows11-ltsc_2024-x64

3

adapters/n...and.js

windows10-2004-x64

3

adapters/n...and.js

windows11-ltsc_2024-x64

3

browser/te...ing.js

windows10-2004-x64

3

browser/te...ing.js

windows11-ltsc_2024-x64

3

browser/te...ort.js

windows10-2004-x64

3

browser/te...ort.js

windows11-ltsc_2024-x64

3

levels/n00...ity.py

windows10-2004-x64

3

levels/n00...ity.py

windows11-ltsc_2024-x64

3

levels/n01...ext.py

windows10-2004-x64

3

levels/n01...ext.py

windows11-ltsc_2024-x64

3

levels/n02...ory.py

windows10-2004-x64

3

levels/n02...ory.py

windows11-ltsc_2024-x64

3

levels/n03...ene.py

windows10-2004-x64

3

levels/n03...ene.py

windows11-ltsc_2024-x64

3

levels/n04...ery.py

windows10-2004-x64

3

levels/n04...ery.py

windows11-ltsc_2024-x64

3

levels/n05...ons.py

windows10-2004-x64

3

levels/n05...ons.py

windows11-ltsc_2024-x64

3

Analysis

  • max time kernel
    1s
  • platform
    debian-9_armhf
  • resource
    debian9-armhf-20260513-en
  • resource tags

    arch:armhfimage:debian9-armhf-20260513-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem
  • submitted
    13/11/2026, 11:50

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    RUN_LEVELUPDIAG.sh
  • Size 247B
  • Sample261113-nzxc1aay91
  • SHA256 ceb05a7c06da595cd4a386789edbb1ec48c513ab4d3074f693586ad34f9bbe6f
  • MD5 SHA1 SHA512 TLSH
Score
1/10

Malware Config

Signatures

Processes

  • /tmp/RUN_LEVELUPDIAG.sh
    /tmp/RUN_LEVELUPDIAG.sh
    1⤵
      PID:660
    • /usr/local/sbin/sh
      sh /tmp/RUN_LEVELUPDIAG.sh
      1⤵
        PID:660
      • /usr/local/bin/sh
        sh /tmp/RUN_LEVELUPDIAG.sh
        1⤵
          PID:660
        • /usr/sbin/sh
          sh /tmp/RUN_LEVELUPDIAG.sh
          1⤵
            PID:660
          • /usr/bin/sh
            sh /tmp/RUN_LEVELUPDIAG.sh
            1⤵
              PID:660
            • /sbin/sh
              sh /tmp/RUN_LEVELUPDIAG.sh
              1⤵
                PID:660
              • /bin/sh
                sh /tmp/RUN_LEVELUPDIAG.sh
                1⤵
                  PID:660
                  • /usr/bin/dirname
                    dirname -- /tmp/RUN_LEVELUPDIAG.sh
                    2⤵
                      PID:663
                  • /usr/local/sbin/python3
                    python3 /tmp/levelupdiag.py run standard
                    1⤵
                      PID:660
                    • /usr/local/bin/python3
                      python3 /tmp/levelupdiag.py run standard
                      1⤵
                        PID:660
                      • /usr/sbin/python3
                        python3 /tmp/levelupdiag.py run standard
                        1⤵
                          PID:660
                        • /usr/bin/python3
                          python3 /tmp/levelupdiag.py run standard
                          1⤵
                            PID:660

                          Network

                                MITRE ATT&CK Matrix

                                Replay Monitor

                                Loading Replay Monitor...

                                Downloads