Analysis date (UTC): 18 November 2024, 21:37Analysis environment: Ubuntu 22.04.2 LTS

owari.x86

MD5:EBAF13FF0A90B6FA0EED43CD178D0F88
SHA1:E9F98ED2A527B9EB8DAD1C722B8A0D3783B4E6EB
SHA256:01207A05E51619D65CCA5FBF8C97E6F8878DD54A58427423CBDB824B9CD4D283

Analysis result

Behavior activities

MALICIOUS

No malicious indicators.

SUSPICIOUS

Modifies file or directory owner

  • sudo (PID: 35783)

Reads /proc/mounts (likely used to find writable filesystems)

  • python3.10 (PID: 35798)

Connects to unusual port

  • owari.x86.o (PID: 35791)

INFO

No info indicators.

Threats

No threats detected

ANY.RUN is an interactive service which provides full access to the guest system. Information in this report could be distorted by user actions and is provided for user acknowledgement as it is. ANY.RUN does not guarantee maliciousness or safety of the content.

Interactive malware hunting service ANY.RUN