General
- Target start.sh
- Size 2KB
- Sample260601-phf55adv7l
- SHA256 2d26b804e3c1f12adc4cde17b83fffde4a2e0cfbbeeab23e39d0362a406ad1f8
- MD5 71b0a5d9e7a7888b610fb148465017a2
- SHA1 31ad8eb3652e64a04ef293bf9c0272f695c8ff5b
- SHA512 84f827f9c32652326df8461820a8c63531202ee326052247a68399cd344bb66c0667499962bdf468f9e008dacc8f45432c5d89d9d4dbf070c8e9ee81e391a8a7
- TLSH T19251DE436891AAB371AA807CFF965089568A45230466BC10FD4E7E207F3822DF4F4F1E
- MD5 SHA1 SHA512 TLSH
Static task
static1
Behavioral task
behavioral1
Sample
start.sh
Resource
ubuntu1804-amd64-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
start.sh
Resource
debian9-armhf-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral3
Sample
start.sh
Resource
debian9-mipsbe-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral4
Sample
start.sh
Resource
debian9-mipsel-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target start.sh
- Size 2KB
- SHA256 2d26b804e3c1f12adc4cde17b83fffde4a2e0cfbbeeab23e39d0362a406ad1f8
- MD5 71b0a5d9e7a7888b610fb148465017a2
- SHA1 31ad8eb3652e64a04ef293bf9c0272f695c8ff5b
- SHA512 84f827f9c32652326df8461820a8c63531202ee326052247a68399cd344bb66c0667499962bdf468f9e008dacc8f45432c5d89d9d4dbf070c8e9ee81e391a8a7
- TLSH T19251DE436891AAB371AA807CFF965089568A45230466BC10FD4E7E207F3822DF4F4F1E
- MD5 SHA1 SHA512 TLSH
Score7/10File and Directory Permissions Modification
Adversaries may modify file or directory permissions to evade defenses.
Executes dropped EXE
Write file to user bin folder
MITRE ATT&CK Enterprise v16
Defense Evasion
File and Directory Permissions Modification
1Linux and Mac File and Directory Permissions Modification
1Virtualization/Sandbox Evasion
1System Checks
1