Overview
overview
3Static
static
1Launch_MUL...mp.lnk
windows10-2004-x64
3Launch_MUL...mp.lnk
windows11-ltsc_2024-x64
3RUN_LEVELUPDIAG.bat
windows10-2004-x64
3RUN_LEVELUPDIAG.bat
windows11-ltsc_2024-x64
3RUN_LEVELUPDIAG.sh
ubuntu-18.04-amd64
1RUN_LEVELUPDIAG.sh
debian-9-armhf
1RUN_LEVELUPDIAG.sh
debian-9-mips
1RUN_LEVELUPDIAG.sh
debian-9-mipsel
1RUN_ORGO.ps1
windows10-2004-x64
3RUN_ORGO.ps1
windows11-ltsc_2024-x64
3RUN_ORGO_UI.bat
windows10-2004-x64
3RUN_ORGO_UI.bat
windows11-ltsc_2024-x64
3adapters/diag-step.js
windows10-2004-x64
3adapters/diag-step.js
windows11-ltsc_2024-x64
3adapters/n...and.js
windows10-2004-x64
3adapters/n...and.js
windows11-ltsc_2024-x64
3browser/te...ing.js
windows10-2004-x64
3browser/te...ing.js
windows11-ltsc_2024-x64
3browser/te...ort.js
windows10-2004-x64
3browser/te...ort.js
windows11-ltsc_2024-x64
3levels/n00...ity.py
windows10-2004-x64
3levels/n00...ity.py
windows11-ltsc_2024-x64
3levels/n01...ext.py
windows10-2004-x64
3levels/n01...ext.py
windows11-ltsc_2024-x64
3levels/n02...ory.py
windows10-2004-x64
3levels/n02...ory.py
windows11-ltsc_2024-x64
3levels/n03...ene.py
windows10-2004-x64
3levels/n03...ene.py
windows11-ltsc_2024-x64
3levels/n04...ery.py
windows10-2004-x64
3levels/n04...ery.py
windows11-ltsc_2024-x64
3levels/n05...ons.py
windows10-2004-x64
3levels/n05...ons.py
windows11-ltsc_2024-x64
3Analysis
- max time kernel
5s - platform
debian-9_mips - resource
debian9-mipsbe-20260513-en - resource tags
arch:mipsimage:debian9-mipsbe-20260513-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipssystem - submitted
13/11/2026, 11:50
Static task
static1
Behavioral task
behavioral1
Sample
Launch_MULTiSmartDump.lnk
Resource
win10v2004-20260911-en
Behavioral task
behavioral2
Sample
Launch_MULTiSmartDump.lnk
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral3
Sample
RUN_LEVELUPDIAG.bat
Resource
win10v2004-20260911-en
Behavioral task
behavioral4
Sample
RUN_LEVELUPDIAG.bat
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral5
Sample
RUN_LEVELUPDIAG.sh
Resource
ubuntu1804-amd64-20261019-en
Behavioral task
behavioral6
Sample
RUN_LEVELUPDIAG.sh
Resource
debian9-armhf-20260513-en
Behavioral task
behavioral7
Sample
RUN_LEVELUPDIAG.sh
Resource
debian9-mipsbe-20260513-en
Behavioral task
behavioral8
Sample
RUN_LEVELUPDIAG.sh
Resource
debian9-mipsel-20260513-en
Behavioral task
behavioral9
Sample
RUN_ORGO.ps1
Resource
win10v2004-20260911-en
Behavioral task
behavioral10
Sample
RUN_ORGO.ps1
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral11
Sample
RUN_ORGO_UI.bat
Resource
win10v2004-20260911-en
Behavioral task
behavioral12
Sample
RUN_ORGO_UI.bat
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral13
Sample
adapters/diag-step.js
Resource
win10v2004-20260911-en
Behavioral task
behavioral14
Sample
adapters/diag-step.js
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral15
Sample
adapters/npm-command.js
Resource
win10v2004-20260911-en
Behavioral task
behavioral16
Sample
adapters/npm-command.js
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral17
Sample
browser/tests/login-pacing.js
Resource
win10v2004-20260911-en
Behavioral task
behavioral18
Sample
browser/tests/login-pacing.js
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral19
Sample
browser/tests/support.js
Resource
win10v2004-20260911-en
Behavioral task
behavioral20
Sample
browser/tests/support.js
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral21
Sample
levels/n00_diagnostic_integrity.py
Resource
win10v2004-20260911-en
Behavioral task
behavioral22
Sample
levels/n00_diagnostic_integrity.py
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral23
Sample
levels/n01_target_context.py
Resource
win10v2004-20260911-en
Behavioral task
behavioral24
Sample
levels/n01_target_context.py
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral25
Sample
levels/n02_repository_inventory.py
Resource
win10v2004-20260911-en
Behavioral task
behavioral26
Sample
levels/n02_repository_inventory.py
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral27
Sample
levels/n03_repository_hygiene.py
Resource
win10v2004-20260911-en
Behavioral task
behavioral28
Sample
levels/n03_repository_hygiene.py
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral29
Sample
levels/n04_tooling_discovery.py
Resource
win10v2004-20260911-en
Behavioral task
behavioral30
Sample
levels/n04_tooling_discovery.py
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral31
Sample
levels/n05_declared_validations.py
Resource
win10v2004-20260911-en
Behavioral task
behavioral32
Sample
levels/n05_declared_validations.py
Resource
win11ltsc2024-20260911-en
General
- Target RUN_LEVELUPDIAG.sh
- Size 247B
- Sample261113-nzxc1aay91
- SHA256 ceb05a7c06da595cd4a386789edbb1ec48c513ab4d3074f693586ad34f9bbe6f
- MD5 a9f5595ad08a97496262e36674b90566
- SHA1 50552ff84e647b870b2d9f6f9f71459093862ab9
- SHA512 ee06d9c5c59263e50deee566b5189639abe29155b178f9367a370430a69e7062a2cae7dec86ee7bf84142f7a663fa0ddc8358bcb6058c6c68c8c90324839aece
- TLSH T1E4D0A736EA3546FC8141D27CB2290000C7F614ECD940646C6940BBECF6B4ED5E8D3A34
- MD5 SHA1 SHA512 TLSH
Malware Config
Signatures
Processes
-
/tmp/RUN_LEVELUPDIAG.sh/tmp/RUN_LEVELUPDIAG.sh1⤵PID:710
-
/usr/local/sbin/shsh /tmp/RUN_LEVELUPDIAG.sh1⤵PID:710
-
/usr/local/bin/shsh /tmp/RUN_LEVELUPDIAG.sh1⤵PID:710
-
/usr/sbin/shsh /tmp/RUN_LEVELUPDIAG.sh1⤵PID:710
-
/usr/bin/shsh /tmp/RUN_LEVELUPDIAG.sh1⤵PID:710
-
/sbin/shsh /tmp/RUN_LEVELUPDIAG.sh1⤵PID:710
-
/bin/shsh /tmp/RUN_LEVELUPDIAG.sh1⤵PID:710
-
/usr/bin/dirnamedirname -- /tmp/RUN_LEVELUPDIAG.sh2⤵PID:715
-
-
/usr/local/sbin/python3python3 /tmp/levelupdiag.py run standard1⤵PID:710
-
/usr/local/bin/python3python3 /tmp/levelupdiag.py run standard1⤵PID:710
-
/usr/sbin/python3python3 /tmp/levelupdiag.py run standard1⤵PID:710
-
/usr/bin/python3python3 /tmp/levelupdiag.py run standard1⤵PID:710