General
-
Target
sky.sh
-
Size
661B
-
Sample
240119-tyx6ssacf4
-
MD5
f58db72fda1726bafd976887f1bcbb89
-
SHA1
8af992f7b66125a41a6b6be6a43660b0ecc05141
-
SHA256
99913604b40684bbba60bcc4dc3291812ba754db2925391da1943e36f46f35ed
-
SHA512
d7a1558f105649fb0302a2b4eabb7bc5cf0d70ab035a65d581a3252953261873ba2e9ac5c28ab486a0c9da4f50f4ffb4b01602328490c03f08f7c4c393338d40
Static task
static1
Behavioral task
behavioral1
Sample
sky.sh
Resource
ubuntu1804-amd64-20231222-en
Behavioral task
behavioral2
Sample
sky.sh
Resource
debian9-armhf-20231215-en
Behavioral task
behavioral3
Sample
sky.sh
Resource
debian9-mipsbe-20231222-en
Malware Config
Extracted
mirai
haha.skyljne.click
Targets
-
-
Target
sky.sh
-
Size
661B
-
MD5
f58db72fda1726bafd976887f1bcbb89
-
SHA1
8af992f7b66125a41a6b6be6a43660b0ecc05141
-
SHA256
99913604b40684bbba60bcc4dc3291812ba754db2925391da1943e36f46f35ed
-
SHA512
d7a1558f105649fb0302a2b4eabb7bc5cf0d70ab035a65d581a3252953261873ba2e9ac5c28ab486a0c9da4f50f4ffb4b01602328490c03f08f7c4c393338d40
-
Contacts a large (111059) amount of remote hosts
This may indicate a network scan to discover remotely running services.
-
Creates a large amount of network flows
This may indicate a network scan to discover remotely running services.
-
Changes its process name
-
Executes dropped EXE
-
Enumerates running processes
Discovers information about currently running processes on the system
-