Overview

overview

7

Static

static

1

t.sh

ubuntu-18.04-amd64

7

t.sh

debian-9-armhf

7

t.sh

debian-9-mips

7

t.sh

debian-9-mipsel

7

Resubmissions

18-04-2024 17:52

240418-wf7zdsbh81 7

17-04-2024 22:31

240417-2fsglagc59 10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    t.sh

  • Size

    390B

  • Sample

    240418-wf7zdsbh81

  • MD5

    b13295bcc383f9aac088e73c3a610661

  • SHA1

    64925135b5a777adbf70e9a7e89690b388f51ddf

  • SHA256

    16d0a7267d5c80c3581a0b6ef3e30f00d68cd7b0017b69f50f20698fb5276f21

  • SHA512

    56093dba08ce2b104d11d006757b4823bafbaf2bf7d45a9429bdbf6f8de342aaeb2d22964f612a5522f70aacd2712392e2c4546f05db51eba43bd58d525447ac

Score
7/10
antivmlinux

Malware Config

Targets

    • Target

      t.sh

    • Size

      390B

    • MD5

      b13295bcc383f9aac088e73c3a610661

    • SHA1

      64925135b5a777adbf70e9a7e89690b388f51ddf

    • SHA256

      16d0a7267d5c80c3581a0b6ef3e30f00d68cd7b0017b69f50f20698fb5276f21

    • SHA512

      56093dba08ce2b104d11d006757b4823bafbaf2bf7d45a9429bdbf6f8de342aaeb2d22964f612a5522f70aacd2712392e2c4546f05db51eba43bd58d525447ac

    Score
    7/10
    antivm

    • Executes dropped EXE

    • Checks CPU configuration

      Checks CPU information which indicate if the system is a virtual machine.

      antivm
    behavioral1behavioral2behavioral3behavioral4

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

1
T1497

Credential Access

Discovery

Virtualization/Sandbox Evasion

1
T1497

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks