General
- Target lil.sh
- Size 839B
- Sample260602-jevlfsf19x
- SHA256 8e502016a2e93832924a1a4a558ed18b05a13cca02bddcf0bcf9e32aed781753
- MD5 bc9c77eed42680f1b71ddd3eff75bfba
- SHA1 78972c3038b4be9a1d89e97317ff400b47ff3890
- SHA512 142b734778b17b712c796941ed755d3e1155c8b3c4e6f2073ab0aea6fece80f837b311c2cef888aa3de3156a0f71186d1380dc7e6cb92ee808c242fd1db4da22
- TLSH T1DC01EFCFC001CB90C1D6F49C32C75584F821C3CB25168BB4BEAC443D8BE6A58B066F84
- MD5 SHA1 SHA512 TLSH
Score
7/10
Static task
static1
Behavioral task
behavioral1
Sample
lil.sh
Resource
ubuntu1804-amd64-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
lil.sh
Resource
debian9-armhf-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral3
Sample
lil.sh
Resource
debian9-mipsbe-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral4
Sample
lil.sh
Resource
debian9-mipsel-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target lil.sh
- Size 839B
- SHA256 8e502016a2e93832924a1a4a558ed18b05a13cca02bddcf0bcf9e32aed781753
- MD5 bc9c77eed42680f1b71ddd3eff75bfba
- SHA1 78972c3038b4be9a1d89e97317ff400b47ff3890
- SHA512 142b734778b17b712c796941ed755d3e1155c8b3c4e6f2073ab0aea6fece80f837b311c2cef888aa3de3156a0f71186d1380dc7e6cb92ee808c242fd1db4da22
- TLSH T1DC01EFCFC001CB90C1D6F49C32C75584F821C3CB25168BB4BEAC443D8BE6A58B066F84
- MD5 SHA1 SHA512 TLSH
Score7/10-
File and Directory Permissions Modification
Adversaries may modify file or directory permissions to evade defenses.
-
Deletes itself
-
Executes dropped EXE
-
Enumerates running processes
Discovers information about currently running processes on the system