Benign Download

45/1b/451bda39d649089a1e9b65c4260ae04f1c05367c7f361c76462b09c0e70ec697

Hidden path prefix in /tmpComposite catalog requires rule references
SHA-256451bda39d649089a1e9b65c4260ae04f1c05367c7f361c76462b09c0e70ec697
MaleculeH(F)Md

Evidence

Top-level traits or composite_rules key lines 1–23
1defaults:
2 platforms: [qnx, unix]
3 for: [c, cpp, elf]
4 attack: T1055
5
6traits:
7 - id: qnx-native-injected-marker
8 desc: QNX native injected marker
9 crit: suspicious
10 conf: 0.94
11 if:
12 type: text
13 substr: echo injected_marker > /tmp/.injected
14
15composite_rules:
⋯8 lines

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.