Analysis

  • max time kernel
    1s
  • platform
    debian-9_mipsel
  • resource
    debian9-mipsel-20260513-en
  • resource tags

    arch:mipselimage:debian9-mipsel-20260513-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipselsystem
  • submitted
    03/06/2026, 12:14

General

  • Target
    install-shared-memory.sh
  • Size 2KB
  • Sample260603-pen2kaev3t
  • SHA256 bba1f586cb8272167c650eec91e3cb951f3c5b31d4e1716a4cc9b11d47f35288
  • MD5 SHA1 SHA512 TLSH
Score
3/10

Malware Config

Signatures

  • Writes file to tmp directory 1 IoCs

    Malware often drops required files in the /tmp directory.

Processes

  • /tmp/install-shared-memory.sh
    /tmp/install-shared-memory.sh
    1⤵
      PID:715
    • /usr/local/sbin/bash
      bash /tmp/install-shared-memory.sh
      1⤵
        PID:715
      • /usr/local/bin/bash
        bash /tmp/install-shared-memory.sh
        1⤵
          PID:715
        • /usr/sbin/bash
          bash /tmp/install-shared-memory.sh
          1⤵
            PID:715
          • /usr/bin/bash
            bash /tmp/install-shared-memory.sh
            1⤵
              PID:715
            • /sbin/bash
              bash /tmp/install-shared-memory.sh
              1⤵
                PID:715
              • /bin/bash
                bash /tmp/install-shared-memory.sh
                1⤵
                • Writes file to tmp directory
                PID:715
                • /bin/cat
                  cat
                  2⤵
                    PID:721

                Network

                      MITRE ATT&CK Matrix

                      Replay Monitor

                      Loading Replay Monitor...

                      Downloads

                      sh-thd.peDjRF

                      • Path /tmp/sh-thd.peDjRF
                      • Size 1KB
                      • SHA256 05ba60d0fd032a315d95ebb675b1b846911e668989f6cfeac76dabe95e2e5f39
                      • MD5 SHA1 SHA512 TLSH