Analysis

  • max time kernel
    0s
  • platform
    debian-9_armhf
  • resource
    debian9-armhf-20260513-en
  • resource tags

    arch:armhfimage:debian9-armhf-20260513-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem
  • submitted
    03/06/2026, 12:14

General

  • Target
    install-shared-memory.sh
  • Size 2KB
  • Sample260603-pen2kaev3t
  • SHA256 bba1f586cb8272167c650eec91e3cb951f3c5b31d4e1716a4cc9b11d47f35288
  • MD5 SHA1 SHA512 TLSH
Score
3/10

Malware Config

Signatures

  • Writes file to tmp directory 1 IoCs

    Malware often drops required files in the /tmp directory.

Processes

  • /tmp/install-shared-memory.sh
    /tmp/install-shared-memory.sh
    1⤵
      PID:641
    • /usr/local/sbin/bash
      bash /tmp/install-shared-memory.sh
      1⤵
        PID:641
      • /usr/local/bin/bash
        bash /tmp/install-shared-memory.sh
        1⤵
          PID:641
        • /usr/sbin/bash
          bash /tmp/install-shared-memory.sh
          1⤵
            PID:641
          • /usr/bin/bash
            bash /tmp/install-shared-memory.sh
            1⤵
              PID:641
            • /sbin/bash
              bash /tmp/install-shared-memory.sh
              1⤵
                PID:641
              • /bin/bash
                bash /tmp/install-shared-memory.sh
                1⤵
                • Writes file to tmp directory
                PID:641
                • /bin/cat
                  cat
                  2⤵
                    PID:648

                Network

                      MITRE ATT&CK Matrix

                      Replay Monitor

                      Loading Replay Monitor...

                      Downloads

                      sh-thd.iUYbNO

                      • Path /tmp/sh-thd.iUYbNO
                      • Size 1KB
                      • SHA256 05ba60d0fd032a315d95ebb675b1b846911e668989f6cfeac76dabe95e2e5f39
                      • MD5 SHA1 SHA512 TLSH