General
- Target tlight.sh
- Size 1KB
- Sample220822-df17qscff9
- SHA256 54f9d96c9369f699bff8c8ceae4d6f1376616488696be2d361f8c83034eab238
Score
9/10
Malware Config
Targets
-
- Target tlight.sh
- Size 1KB
- SHA256 54f9d96c9369f699bff8c8ceae4d6f1376616488696be2d361f8c83034eab238
Score9/10-
Writes file to system bin folder
-
Writes DNS configuration
Writes data to DNS resolver config file.
-
Creates a large amount of network flows
This may indicate a network scan to discover remotely running services.
-
Reads runtime system information
Reads data from /proc virtual filesystem.
-
Writes file to tmp directory
Malware often drops required files in the /tmp directory.