c0634f254bcf7e22e9c185b7b19468f636e055bb2f914b7e510a9f0bcb3069a0

Analysis

max time kernel
29s
max time network
131s
platform
ubuntu-18.04_amd64
resource
ubuntu1804-amd64-20240508-en
resource tags

arch:amd64arch:i386image:ubuntu1804-amd64-20240508-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system
submitted
24-06-2024 19:46

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

.rsync/c/run
Size

489B
MD5

97a962fb5bd427e09547ecaaf850e034
SHA1

3040ea8bc3226af1fc201c4fefcca17b62184bbe
SHA256

5a1797ae845e8c80c771ece9174b93ad5d5a74e593fe3b508ba105830db5fd92
SHA512

2ed6bad217478913a053fbcad37c904dddacee424ce39115c15019477870582b0d53da908783047cf9069df0a011387b3fba336385ff392ab0be84cd49d04001

Score

4^/10

antivm

Malware Config

Signatures

Checks CPU configuration 1 TTPs 1 IoCs
Checks CPU information which indicate if the system is a virtual machine.
antivm

Virtualization/Sandbox Evasion
T1497

Processes:

cat

description ioc process

File opened for reading /proc/cpuinfo cat

description	ioc	process
File opened for reading	/proc/cpuinfo	cat

/tmp/.rsync/c/run
/tmp/.rsync/c/run
1⤵
PID:1502

/usr/bin/wc
wc -l
2⤵
PID:1507

/bin/grep
grep name
2⤵
PID:1506

/bin/grep
grep model
2⤵
PID:1505

/bin/cat
cat /proc/cpuinfo
2⤵
- Checks CPU configuration
PID:1504

/bin/uname
uname -m
2⤵
PID:1508

/bin/sleep
sleep 15
2⤵
PID:1509

/tmp/.rsync/c/stop
./stop
2⤵
PID:1513

/bin/sleep
sleep 3
2⤵
PID:1514

/bin/sleep
sleep 11
2⤵
PID:1515

/usr/bin/nohup
nohup ./go
1⤵
PID:1516

/tmp/.rsync/c/go
./go
1⤵
PID:1516

Network

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1497

Credential Access

Discovery

Virtualization/Sandbox Evasion

T1497

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix ATT&CK v13

Replay Monitor

Loading Replay Monitor...

Downloads