General
- Target all.sh
- Size 3KB
- Sample260429-hebb5sc16j
- SHA256 289a65cd34035c522e456140bca2c5fdf6ad0d1afabc446dcda7fa528dd97b09
- MD5 72cce5f54f04dc9a49d1c977a5c69d01
- SHA1 aab324c7901cba601be0dc78df21b6d03b052caa
- SHA512 884fb73eb41fa207fd0c5a6e836b4114abf43edbb7cd69922b97b4d6e03ce835d337d0dea3999f80e94ea03166dd9b1f66f2e05813ee84bcd596d9f1e728c89c
- TLSH T1677194DC012133B7ED29AB1F7B54CB25298481D22E90CFBD6D49DE244B847A73B4B6C0
- MD5 SHA1 SHA512 TLSH
Score
9/10
Static task
static1
Behavioral task
behavioral1
Sample
all.sh
Resource
ubuntu1804-amd64-20260126-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
all.sh
Resource
debian9-armhf-20260126-en
4 signatures
150 seconds
Behavioral task
behavioral3
Sample
all.sh
Resource
debian9-mipsbe-20260127-en
4 signatures
150 seconds
Behavioral task
behavioral4
Sample
all.sh
Resource
debian9-mipsel-20260126-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target all.sh
- Size 3KB
- SHA256 289a65cd34035c522e456140bca2c5fdf6ad0d1afabc446dcda7fa528dd97b09
- MD5 72cce5f54f04dc9a49d1c977a5c69d01
- SHA1 aab324c7901cba601be0dc78df21b6d03b052caa
- SHA512 884fb73eb41fa207fd0c5a6e836b4114abf43edbb7cd69922b97b4d6e03ce835d337d0dea3999f80e94ea03166dd9b1f66f2e05813ee84bcd596d9f1e728c89c
- TLSH T1677194DC012133B7ED29AB1F7B54CB25298481D22E90CFBD6D49DE244B847A73B4B6C0
- MD5 SHA1 SHA512 TLSH
Score9/10-
Contacts a large (2721) amount of remote hosts
This may indicate a network scan to discover remotely running services.
-
File and Directory Permissions Modification
Adversaries may modify file or directory permissions to evade defenses.
-
Executes dropped EXE