c27c849140755744d1d79b184dfce02f4becf71c197749b18a7ac6e6b4d7d6cc

Analysis

max time kernel
165s
platform
debian-9_mipsel
resource
debian9-mipsel-20260126-en
resource tags

arch:mipselimage:debian9-mipsel-20260126-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipselsystem
submitted
26/04/2026, 15:21

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
tools/linux/macguest.sh
Size 7KB
Sample260426-srtpcsc12p
SHA256 c27c849140755744d1d79b184dfce02f4becf71c197749b18a7ac6e6b4d7d6cc
MD5 2be8d114e52d51b7e19fd5fa64e744a0
SHA1 55377d888460af137ced43815b8e076ab64b329b
SHA512 6cd9537435ebe527dc9251f31e3dba3ed0d3307ddda7924d15ef2bfc6d705d731794ccb2d539f4b34b412c803a65fa46eef02243a1dfcb2e13ebda4dcc3d7699
SSDEEP 192:8t57RXHsVCnYD9gmnaCOrHCnUOq7Y6b2LkPx:+E0nmFO8UOqsoPx
TLSH
T185F1D13A76C158F1500DD5ADD8C3A46E361C0A0B28082D69741EF9AC3F3D79DD1EA2BD
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Malware Config

Signatures

/tmp/tools/linux/macguest.sh
/tmp/tools/linux/macguest.sh
1⤵
PID:810
- /usr/bin/clear
  clear
  2⤵
  PID:811
- /usr/bin/clear
  clear
  2⤵
  PID:813
- /usr/bin/clear
  clear
  2⤵
  PID:816
- /usr/bin/clear
  clear
  2⤵
  PID:818
- /usr/bin/clear
  clear
  2⤵
  PID:819
- /usr/bin/clear
  clear
  2⤵
  PID:820
- /usr/bin/clear
  clear
  2⤵
  PID:821
- /usr/bin/clear
  clear
  2⤵
  PID:822
- /usr/bin/clear
  clear
  2⤵
  PID:823
- /usr/bin/clear
  clear
  2⤵
  PID:824
- /usr/bin/clear
  clear
  2⤵
  PID:825
- /usr/bin/clear
  clear
  2⤵
  PID:826
- /usr/bin/clear
  clear
  2⤵
  PID:827
- /usr/bin/clear
  clear
  2⤵
  PID:828
- /usr/bin/clear
  clear
  2⤵
  PID:829
- /usr/bin/clear
  clear
  2⤵
  PID:830
- /usr/bin/clear
  clear
  2⤵
  PID:831
- /usr/bin/clear
  clear
  2⤵
  PID:832
- /usr/bin/clear
  clear
  2⤵
  PID:833
- /usr/bin/clear
  clear
  2⤵
  PID:834
- /usr/bin/clear
  clear
  2⤵
  PID:835
- /usr/bin/clear
  clear
  2⤵
  PID:836
- /usr/bin/clear
  clear
  2⤵
  PID:837
- /usr/bin/clear
  clear
  2⤵
  PID:838
- /usr/bin/clear
  clear
  2⤵
  PID:839
- /usr/bin/clear
  clear
  2⤵
  PID:840
- /usr/bin/clear
  clear
  2⤵
  PID:841
- /usr/bin/clear
  clear
  2⤵
  PID:842
- /usr/bin/clear
  clear
  2⤵
  PID:843
- /usr/bin/clear
  clear
  2⤵
  PID:844
- /usr/bin/clear
  clear
  2⤵
  PID:845
- /usr/bin/clear
  clear
  2⤵
  PID:846
- /usr/bin/clear
  clear
  2⤵
  PID:847
- /usr/bin/clear
  clear
  2⤵
  PID:848
- /usr/bin/clear
  clear
  2⤵
  PID:849
- /usr/bin/clear
  clear
  2⤵
  PID:850
- /usr/bin/clear
  clear
  2⤵
  PID:851
- /usr/bin/clear
  clear
  2⤵
  PID:852
- /usr/bin/clear
  clear
  2⤵
  PID:853
- /usr/bin/clear
  clear
  2⤵
  PID:854
- /usr/bin/clear
  clear
  2⤵
  PID:856
- /usr/bin/clear
  clear
  2⤵
  PID:857
- /usr/bin/clear
  clear
  2⤵
  PID:858
- /usr/bin/clear
  clear
  2⤵
  PID:859
- /usr/bin/clear
  clear
  2⤵
  PID:860
- /usr/bin/clear
  clear
  2⤵
  PID:861
- /usr/bin/clear
  clear
  2⤵
  PID:862
- /usr/bin/clear
  clear
  2⤵
  PID:863
- /usr/bin/clear
  clear
  2⤵
  PID:864
- /usr/bin/clear
  clear
  2⤵
  PID:865
- /usr/bin/clear
  clear
  2⤵
  PID:866
- /usr/bin/clear
  clear
  2⤵
  PID:867
- /usr/bin/clear
  clear
  2⤵
  PID:868
- /usr/bin/clear
  clear
  2⤵
  PID:869
- /usr/bin/clear
  clear
  2⤵
  PID:870
- /usr/bin/clear
  clear
  2⤵
  PID:871
- /usr/bin/clear
  clear
  2⤵
  PID:872
- /usr/bin/clear
  clear
  2⤵
  PID:873
- /usr/bin/clear
  clear
  2⤵
  PID:874
- /usr/bin/clear
  clear
  2⤵
  PID:875
- /usr/bin/clear
  clear
  2⤵
  PID:876
- /usr/bin/clear
  clear
  2⤵
  PID:877
- /usr/bin/clear
  clear
  2⤵
  PID:878
- /usr/bin/clear
  clear
  2⤵
  PID:879
- /usr/bin/clear
  clear
  2⤵
  PID:880
- /usr/bin/clear
  clear
  2⤵
  PID:881
- /usr/bin/clear
  clear
  2⤵
  PID:882
- /usr/bin/clear
  clear
  2⤵
  PID:883
- /usr/bin/clear
  clear
  2⤵
  PID:884
- /usr/bin/clear
  clear
  2⤵
  PID:885
- /usr/bin/clear
  clear
  2⤵
  PID:886
- /usr/bin/clear
  clear
  2⤵
  PID:887
- /usr/bin/clear
  clear
  2⤵
  PID:888
- /usr/bin/clear
  clear
  2⤵
  PID:889
- /usr/bin/clear
  clear
  2⤵
  PID:890
- /usr/bin/clear
  clear
  2⤵
  PID:891
- /usr/bin/clear
  clear
  2⤵
  PID:892
- /usr/bin/clear
  clear
  2⤵
  PID:893
- /usr/bin/clear
  clear
  2⤵
  PID:894
- /usr/bin/clear
  clear
  2⤵
  PID:895
- /usr/bin/clear
  clear
  2⤵
  PID:896
- /usr/bin/clear
  clear
  2⤵
  PID:897
- /usr/bin/clear
  clear
  2⤵
  PID:898
- /usr/bin/clear
  clear
  2⤵
  PID:899
- /usr/bin/clear
  clear
  2⤵
  PID:900
- /usr/bin/clear
  clear
  2⤵
  PID:901
- /usr/bin/clear
  clear
  2⤵
  PID:902
- /usr/bin/clear
  clear
  2⤵
  PID:903
- /usr/bin/clear
  clear
  2⤵
  PID:904
- /usr/bin/clear
  clear
  2⤵
  PID:905
- /usr/bin/clear
  clear
  2⤵
  PID:906
- /usr/bin/clear
  clear
  2⤵
  PID:907
- /usr/bin/clear
  clear
  2⤵
  PID:908
- /usr/bin/clear
  clear
  2⤵
  PID:909
- /usr/bin/clear
  clear
  2⤵
  PID:910
- /usr/bin/clear
  clear
  2⤵
  PID:911
- /usr/bin/clear
  clear
  2⤵
  PID:912
- /usr/bin/clear
  clear
  2⤵
  PID:913
- /usr/bin/clear
  clear
  2⤵
  PID:914
- /usr/bin/clear
  clear
  2⤵
  PID:915
- /usr/bin/clear
  clear
  2⤵
  PID:916
- /usr/bin/clear
  clear
  2⤵
  PID:917
- /usr/bin/clear
  clear
  2⤵
  PID:918
- /usr/bin/clear
  clear
  2⤵
  PID:919
- /usr/bin/clear
  clear
  2⤵
  PID:920
- /usr/bin/clear
  clear
  2⤵
  PID:921
- /usr/bin/clear
  clear
  2⤵
  PID:922
- /usr/bin/clear
  clear
  2⤵
  PID:923
- /usr/bin/clear
  clear
  2⤵
  PID:924
- /usr/bin/clear
  clear
  2⤵
  PID:925
- /usr/bin/clear
  clear
  2⤵
  PID:926
- /usr/bin/clear
  clear
  2⤵
  PID:927
- /usr/bin/clear
  clear
  2⤵
  PID:928
- /usr/bin/clear
  clear
  2⤵
  PID:929
- /usr/bin/clear
  clear
  2⤵
  PID:930
- /usr/bin/clear
  clear
  2⤵
  PID:931
- /usr/bin/clear
  clear
  2⤵
  PID:932
- /usr/bin/clear
  clear
  2⤵
  PID:933
- /usr/bin/clear
  clear
  2⤵
  PID:934
- /usr/bin/clear
  clear
  2⤵
  PID:935
- /usr/bin/clear
  clear
  2⤵
  PID:936
- /usr/bin/clear
  clear
  2⤵
  PID:937
- /usr/bin/clear
  clear
  2⤵
  PID:938
- /usr/bin/clear
  clear
  2⤵
  PID:939
- /usr/bin/clear
  clear
  2⤵
  PID:940
- /usr/bin/clear
  clear
  2⤵
  PID:941
- /usr/bin/clear
  clear
  2⤵
  PID:942
- /usr/bin/clear
  clear
  2⤵
  PID:943
- /usr/bin/clear
  clear
  2⤵
  PID:944
- /usr/bin/clear
  clear
  2⤵
  PID:945
- /usr/bin/clear
  clear
  2⤵
  PID:946
- /usr/bin/clear
  clear
  2⤵
  PID:947
- /usr/bin/clear
  clear
  2⤵
  PID:948
- /usr/bin/clear
  clear
  2⤵
  PID:949
- /usr/bin/clear
  clear
  2⤵
  PID:950
- /usr/bin/clear
  clear
  2⤵
  PID:951
- /usr/bin/clear
  clear
  2⤵
  PID:952
- /usr/bin/clear
  clear
  2⤵
  PID:953
- /usr/bin/clear
  clear
  2⤵
  PID:954
- /usr/bin/clear
  clear
  2⤵
  PID:955
- /usr/bin/clear
  clear
  2⤵
  PID:956
- /usr/bin/clear
  clear
  2⤵
  PID:957
- /usr/bin/clear
  clear
  2⤵
  PID:958
- /usr/bin/clear
  clear
  2⤵
  PID:959
- /usr/bin/clear
  clear
  2⤵
  PID:960
- /usr/bin/clear
  clear
  2⤵
  PID:961
- /usr/bin/clear
  clear
  2⤵
  PID:962
- /usr/bin/clear
  clear
  2⤵
  PID:963
- /usr/bin/clear
  clear
  2⤵
  PID:964
- /usr/bin/clear
  clear
  2⤵
  PID:965
- /usr/bin/clear
  clear
  2⤵
  PID:966
- /usr/bin/clear
  clear
  2⤵
  PID:967
- /usr/bin/clear
  clear
  2⤵
  PID:968
- /usr/bin/clear
  clear
  2⤵
  PID:969
- /usr/bin/clear
  clear
  2⤵
  PID:970
- /usr/bin/clear
  clear
  2⤵
  PID:971
- /usr/bin/clear
  clear
  2⤵
  PID:972
- /usr/bin/clear
  clear
  2⤵
  PID:973
- /usr/bin/clear
  clear
  2⤵
  PID:974
- /usr/bin/clear
  clear
  2⤵
  PID:975
- /usr/bin/clear
  clear
  2⤵
  PID:976
- /usr/bin/clear
  clear
  2⤵
  PID:977
- /usr/bin/clear
  clear
  2⤵
  PID:978
- /usr/bin/clear
  clear
  2⤵
  PID:979
- /usr/bin/clear
  clear
  2⤵
  PID:980
- /usr/bin/clear
  clear
  2⤵
  PID:981
- /usr/bin/clear
  clear
  2⤵
  PID:982
- /usr/bin/clear
  clear
  2⤵
  PID:983
- /usr/bin/clear
  clear
  2⤵
  PID:984
- /usr/bin/clear
  clear
  2⤵
  PID:985
- /usr/bin/clear
  clear
  2⤵
  PID:986
- /usr/bin/clear
  clear
  2⤵
  PID:987
- /usr/bin/clear
  clear
  2⤵
  PID:988
- /usr/bin/clear
  clear
  2⤵
  PID:989
- /usr/bin/clear
  clear
  2⤵
  PID:990
- /usr/bin/clear
  clear
  2⤵
  PID:991
- /usr/bin/clear
  clear
  2⤵
  PID:992
- /usr/bin/clear
  clear
  2⤵
  PID:993
- /usr/bin/clear
  clear
  2⤵
  PID:994
- /usr/bin/clear
  clear
  2⤵
  PID:995
- /usr/bin/clear
  clear
  2⤵
  PID:996
- /usr/bin/clear
  clear
  2⤵
  PID:997
- /usr/bin/clear
  clear
  2⤵
  PID:998
- /usr/bin/clear
  clear
  2⤵
  PID:999
- /usr/bin/clear
  clear
  2⤵
  PID:1000
- /usr/bin/clear
  clear
  2⤵
  PID:1001
- /usr/bin/clear
  clear
  2⤵
  PID:1002
- /usr/bin/clear
  clear
  2⤵
  PID:1003
- /usr/bin/clear
  clear
  2⤵
  PID:1004
- /usr/bin/clear
  clear
  2⤵
  PID:1005
- /usr/bin/clear
  clear
  2⤵
  PID:1006
- /usr/bin/clear
  clear
  2⤵
  PID:1007
- /usr/bin/clear
  clear
  2⤵
  PID:1008
- /usr/bin/clear
  clear
  2⤵
  PID:1009
- /usr/bin/clear
  clear
  2⤵
  PID:1010
- /usr/bin/clear
  clear
  2⤵
  PID:1011
- /usr/bin/clear
  clear
  2⤵
  PID:1012
- /usr/bin/clear
  clear
  2⤵
  PID:1013
- /usr/bin/clear
  clear
  2⤵
  PID:1014
- /usr/bin/clear
  clear
  2⤵
  PID:1015

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads