File name:

logicdata.sal

Full analysis: https://app.any.run/tasks/270b0077-6ff1-4c2b-aaf4-c8542fe3f8c1
Verdict: Malicious activity
Analysis date: March 16, 2024, 11:40:03
OS: Ubuntu 22.04.2
MIME: application/zip
File info: Zip archive data, at least v2.0 to extract, compression method=deflate
MD5:

5601EB6A7A6CD37209B22377E8164437

SHA1:

BFDBED2A48BC98429E5B4FD6E616A6FEE23952C9

SHA256:

E36AFE673B0EDBF77F81E0D58D67FCC5D85AA0CBCB3F07327A45B91247806A13

SSDEEP:

192:s/OZ/O6/Of/Ov1x0HfwTMkSYhwOPPoRUI/Or/O2/O5SBCFtnZE6:vcdJ8PooYNl

ANY.RUN is an interactive service which provides full access to the guest system. Information in this report could be distorted by user actions and is provided for user acknowledgement as it is. ANY.RUN does not guarantee maliciousness or safety of the content.

  • MALICIOUS

    No malicious indicators.

  • SUSPICIOUS

    No suspicious indicators.

  • INFO

    No info indicators.
Find more information about signature artifacts and mapping to MITRE ATT&CK™ MATRIX at the full report
No Malware configuration.

TRiD

.zip | ZIP compressed archive (100)

EXIF

ZIP

ZipRequiredVersion: 20
ZipBitFlag: 0x0008
ZipCompression: Deflated
ZipModifyDate: 2024:03:13 13:52:14
ZipCRC: 0xd663e36f
ZipCompressedSize: 561
ZipUncompressedSize: 7003
ZipFileName: digital-0.bin

JSON

BinDataCategory:
  • legacy
  • legacy
  • legacy
  • legacy
  • legacy
  • legacy
  • legacy
  • legacy
BinDataDeviceChannel:
  • 0
  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
BinDataFile:
  • ./digital-0.bin
  • ./digital-1.bin
  • ./digital-2.bin
  • ./digital-3.bin
  • ./digital-4.bin
  • ./digital-5.bin
  • ./digital-6.bin
  • ./digital-7.bin
BinDataType:
  • Digital
  • Digital
  • Digital
  • Digital
  • Digital
  • Digital
  • Digital
  • Digital
DataAnalyzerTriggerSettingsEnabled: -
DataAnalyzerTriggerSettingsHoldoffSeconds: 0.2
DataAnalyzerTriggerSettingsSearchQuery: -
DataCaptureNotes: -
DataCaptureProgressIsProcessing: -
DataCaptureProgressMaxCollectedTime: 1.8773333333333333
DataCaptureProgressMemoryUsedMb: -
DataCaptureProgressProcessedIntervalBegin: -
DataCaptureProgressProcessedIntervalEnd: 1.8773333333333333
DataCaptureSettingsBufferSizeMb: 3072
DataCaptureSettingsCaptureMode: Circular
DataCaptureSettingsConnectedDeviceCapabilitiesChannelCapabilitiesCapability:
  • AlwaysEnabled
  • AlwaysEnabled
  • AlwaysEnabled
  • AlwaysEnabled
  • AlwaysEnabled
  • AlwaysEnabled
  • AlwaysEnabled
  • AlwaysEnabled
DataCaptureSettingsConnectedDeviceCapabilitiesChannelCapabilitiesIndex:
  • 0
  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
DataCaptureSettingsConnectedDeviceCapabilitiesChannelCapabilitiesType:
  • Digital
  • Digital
  • Digital
  • Digital
  • Digital
  • Digital
  • Digital
  • Digital
DataCaptureSettingsConnectedDeviceCapabilitiesIsPhysicalDevice:
DataCaptureSettingsConnectedDeviceCapabilitiesSampleRateOptionsDigital:
  • 24000000
  • 16000000
  • 12000000
  • 8000000
  • 4000000
  • 2000000
  • 1000000
  • 500000
  • 250000
  • 200000
  • 100000
  • 50000
  • 25000
DataCaptureSettingsConnectedDeviceDeviceId: 11837860448715832408
DataCaptureSettingsConnectedDeviceDeviceType: Logic
DataCaptureSettingsConnectedDeviceIsSimulation: -
DataCaptureSettingsConnectedDeviceName: Logic
DataCaptureSettingsConnectedDeviceSettingsEnabledChannelsIndex:
  • 0
  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
DataCaptureSettingsConnectedDeviceSettingsEnabledChannelsType:
  • Digital
  • Digital
  • Digital
  • Digital
  • Digital
  • Digital
  • Digital
  • Digital
DataCaptureSettingsConnectedDeviceSettingsSampleRateDigital: 24000000
DataCaptureSettingsDigitalTriggerSettingsDurationMax: 0.01
DataCaptureSettingsDigitalTriggerSettingsDurationMin: 0.001
DataCaptureSettingsDigitalTriggerSettingsTimeAfterTriggerToStop: 1
DataCaptureSettingsDigitalTriggerSettingsTypeMode: Edge
DataCaptureSettingsDigitalTriggerSettingsTypeName: Rising
DataCaptureSettingsDigitalTriggerSettingsTypePattern: Rising
DataCaptureSettingsGlitchFilterEnabled: -
DataCaptureSettingsStopAfterSeconds: 100
DataCaptureSettingsTrimAfterCapture: -
DataCaptureSettingsTrimTimeSeconds: 5
DataCaptureStartTimeFractionalMilliseconds: 0.4468
DataCaptureStartTimeUnixTimeMilliseconds: 1710337852995
DataDataTableColumnsAnalyzerIdentifierBaseKey: analyzerIdentifier
DataDataTableColumnsAnalyzerIdentifierExcludeFromSearch:
DataDataTableColumnsAnalyzerIdentifierIsActive:
DataDataTableColumnsAnalyzerIdentifierIsDefault:
DataDataTableColumnsAnalyzerIdentifierWidth: 18
DataDataTableColumnsDurationBaseKey: duration
DataDataTableColumnsDurationExcludeFromSearch:
DataDataTableColumnsDurationIsActive:
DataDataTableColumnsDurationIsDefault:
DataDataTableColumnsDurationWidth: 80
DataDataTableColumnsFrameTypeBaseKey: frameType
DataDataTableColumnsFrameTypeExcludeFromSearch: -
DataDataTableColumnsFrameTypeIsActive:
DataDataTableColumnsFrameTypeIsDefault:
DataDataTableColumnsFrameTypeWidth: 75
DataDataTableColumnsStartBaseKey: start
DataDataTableColumnsStartExcludeFromSearch:
DataDataTableColumnsStartIsActive:
DataDataTableColumnsStartIsDefault:
DataDataTableColumnsStartWidth: 110
DataDigitalTriggerTime: -1
DataName: Session 1
DataRenderViewStateLeftEdgeTimeSec: 1.8122835270242041
DataRenderViewStateNavigationViewMode: Timeline
DataRenderViewStateTimeSecPerPixel: 0.000006551511435860176
DataRowsSettingsChannelCategory:
  • legacy
  • legacy
  • legacy
  • legacy
  • legacy
  • legacy
  • legacy
  • legacy
DataRowsSettingsChannelDeviceChannel:
  • 0
  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
DataRowsSettingsChannelType:
  • Digital
  • Digital
  • Digital
  • Digital
  • Digital
  • Digital
  • Digital
  • Digital
DataRowsSettingsHeight:
  • 100
  • 100
  • 100
  • 100
  • 100
  • 100
  • 100
  • 100
DataRowsSettingsId:
  • b27b3b71-f32b-4015-bc6a-fbac309ff0c1
  • 3db248e9-48c8-48e4-916e-86132b5ef7a1
  • 31e90f2f-e310-41c5-a7c2-1c4f032ab55f
  • bb5925e2-fcdf-43ee-a64f-d7cd4a409e0c
  • 44500122-c57a-4529-a06f-b8e95984ab66
  • 3915ae0f-7ae7-4597-a792-2a1580716b74
  • 82098ff2-14e3-46da-8f2d-bf15324c5aa2
  • a2b171d2-2754-4215-9910-a93d8952a753
DataRowsSettingsIsMarkedHidden:
  • false
  • false
  • false
  • false
  • false
  • false
  • false
  • false
DataRowsSettingsName:
  • Channel 0
  • Channel 1
  • Channel 2
  • Channel 3
  • Channel 4
  • Channel 5
  • Channel 6
  • Channel 7
DataRowsSettingsType:
  • channel
  • channel
  • channel
  • channel
  • channel
  • channel
  • channel
  • channel
DataTimeManagerT0Type: startOfCapture
Version: 16
No data.
screenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshot
All screenshots are available in the full report
All screenshots are available in the full report
Total processes
235
Monitored processes
12
Malicious processes
0
Suspicious processes
0

Behavior graph

Click at the process to see the details
start sh no specs sudo no specs file-roller no specs locale-check no specs 7z no specs 7z no specs dbus-daemon no specs gnome-text-editor no specs 7z no specs 7z no specs 7z no specs 7z no specs

Process information

PID
CMD
Path
Indicators
Parent process
9305/bin/sh -c "DISPLAY=:0 sudo -iu user file-roller \"/tmp/logicdata\.sal\.zip\" "/bin/sh—any-guest-agent
User:
user
Integrity Level:
UNKNOWN
Exit code:
0
9306sudo -iu user file-roller /tmp/logicdata.sal.zip/usr/bin/sudo—sh
User:
user
Integrity Level:
UNKNOWN
Exit code:
0
9307file-roller /tmp/logicdata.sal.zip/usr/bin/file-roller—sudo
User:
user
Integrity Level:
UNKNOWN
Exit code:
0
9308/usr/bin/locale-check C.UTF-8/usr/bin/locale-check—file-roller
User:
user
Integrity Level:
UNKNOWN
Exit code:
0
9322/usr/lib/p7zip/7z l -slt -bd -y -- /tmp/logicdata.sal.zip/usr/lib/p7zip/7z—file-roller
User:
user
Integrity Level:
UNKNOWN
Exit code:
0
9323/usr/lib/p7zip/7z x -bd -bb1 -y -o/home/user/.cache/.fr-jpVLyR -- /tmp/logicdata.sal.zip meta.json/usr/lib/p7zip/7z—file-roller
User:
user
Integrity Level:
UNKNOWN
Exit code:
9307
9325/usr/bin/dbus-daemon --session --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only/usr/bin/dbus-daemon—dbus-daemon
User:
user
Integrity Level:
UNKNOWN
Exit code:
496
9326/usr/bin/gnome-text-editor --gapplication-service/usr/bin/gnome-text-editor—dbus-daemon
User:
user
Integrity Level:
UNKNOWN
Exit code:
0
9381/usr/lib/p7zip/7z x -bd -bb1 -y -o/home/user/.cache/.fr-nMyHwJ -- /tmp/logicdata.sal.zip digital-7.bin/usr/lib/p7zip/7z—file-roller
User:
user
Integrity Level:
UNKNOWN
Exit code:
416
9390/usr/lib/p7zip/7z x -bd -bb1 -y -o/home/user/.cache/.fr-O8UwEz -- /tmp/logicdata.sal.zip digital-5.bin/usr/lib/p7zip/7z—file-roller
User:
user
Integrity Level:
UNKNOWN
Exit code:
209
Executable files
0
Suspicious files
0
Text files
0
Unknown types
0

Dropped files

PID
Process
Filename
Type
9307file-roller/dconf/user —
MD5:—
SHA256:—
93237z/home/user/.cache/.fr-jpVLyR/meta.json —
MD5:—
SHA256:—
9326gnome-text-editor/home/user/.local/share/org.gnome.TextEditor/recently-used.xbel.5FGYK2 —
MD5:—
SHA256:—
9326gnome-text-editor/home/user/.config/enchant/en_IE.dic —
MD5:—
SHA256:—
9326gnome-text-editor/home/user/.config/enchant/en_IE.exc —
MD5:—
SHA256:—
9326gnome-text-editor/home/user/.cache/mesa_shader_cache/bc/42e08f7002fdc6e1d467570cdbf1468ff1b628.tmp —
MD5:—
SHA256:—
9326gnome-text-editor/home/user/.cache/mesa_shader_cache/2b/614a0f3c7fb73a9936c95e88466e635fc5f43b.tmp —
MD5:—
SHA256:—
9326gnome-text-editor/home/user/.cache/mesa_shader_cache/39/f73ae7cc41bcad2026c47fc283d17c76640575.tmp —
MD5:—
SHA256:—
9326gnome-text-editor/home/user/.cache/mesa_shader_cache/e5/9c805a99e570ccff2d7ec9333594a898aaedbb.tmp —
MD5:—
SHA256:—
9326gnome-text-editor/home/user/.cache/mesa_shader_cache/55/ab1504d05fe24e7ff0e4c43ca7ce085c95e047.tmp —
MD5:—
SHA256:—
Download PCAP, analyze network streams, HTTP content and a lot more at the full report
HTTP(S) requests
0
TCP/UDP connections
5
DNS requests
10
Threats
0

HTTP requests

No HTTP requests
Download PCAP, analyze network streams, HTTP content and a lot more at the full report

Connections

PID
Process
IP
Domain
ASN
CN
Reputation
—
—
185.125.188.59:443
api.snapcraft.io
Canonical Group Limited
GB
unknown
—
—
185.125.188.58:443
api.snapcraft.io
Canonical Group Limited
GB
unknown
—
—
224.0.0.251:5353
—
—
—
unknown
—
—
185.125.188.55:443
api.snapcraft.io
Canonical Group Limited
GB
unknown
—
—
185.125.188.54:443
api.snapcraft.io
Canonical Group Limited
GB
unknown

DNS requests

Domain
IP
Reputation
api.snapcraft.io
  • 185.125.188.59
  • 185.125.188.58
  • 185.125.188.54
  • 185.125.188.55
unknown
79.100.168.192.in-addr.arpa
  • —
unknown
connectivity-check.ubuntu.com
  • 2001:67c:1562::24
  • 2620:2d:4000:1::23
  • 2620:2d:4000:1::2b
  • 2620:2d:4000:1::2a
  • 2620:2d:4000:1::22
  • 2620:2d:4000:1::96
  • 2620:2d:4000:1::97
  • 2620:2d:4002:1::197
  • 2620:2d:4002:1::196
  • 2001:67c:1562::23
  • 2620:2d:4002:1::198
  • 2620:2d:4000:1::98
unknown

Threats

No threats detected
No debug info
Interactive malware hunting service ANY.RUN
© 2017-2025 ANY.RUN ALL RIGHTS RESERVED
ANY.RUN
Reports
logicdata.sal