Overview

overview

8

Static

static

3

73j3B9.7z

windows10-2004-x64

8

73j3B9.7z

windows11-21h2-x64

1

KanvasWebserverLinux

ubuntu-18.04-amd64

1

KanvasWebserverMac

macos-10.15-amd64

1

LinuxScript.sh

ubuntu-18.04-amd64

6

LinuxScript.sh

debian-9-armhf

6

LinuxScript.sh

debian-9-mips

1

LinuxScript.sh

debian-9-mipsel

1

MacScript.sh

ubuntu-18.04-amd64

6

MacScript.sh

debian-9-armhf

6

MacScript.sh

debian-9-mips

1

MacScript.sh

debian-9-mipsel

1

MacWrapper.sh

ubuntu-18.04-amd64

1

MacWrapper.sh

debian-9-armhf

1

MacWrapper.sh

debian-9-mips

1

MacWrapper.sh

debian-9-mipsel

1

Resubmissions

04/06/2026, 22:47

260604-2qrcaagt8z8

04/06/2026, 22:25

260604-2b2vgagt2v8

04/06/2026, 21:13

260604-z2vgzafz8n8

Analysis

  • max time kernel
    0s
  • platform
    debian-9_armhf
  • resource
    debian9-armhf-20260513-en
  • resource tags

    arch:armhfimage:debian9-armhf-20260513-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem
  • submitted
    04/06/2026, 22:25

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    MacWrapper.sh
  • Size 196B
  • Sample260604-2b2vgagt2v
  • SHA256 2eaec7be1e6ee5857b695b2f3b0e2668f01c3a42f875d6371d395684ee5d8b0c
  • MD5 SHA1 SHA512 TLSH
Score
1/10

Malware Config

Signatures

Processes

  • /tmp/MacWrapper.sh
    /tmp/MacWrapper.sh
    1⤵
      PID:769
    • /usr/local/sbin/sh
      sh /tmp/MacWrapper.sh
      1⤵
        PID:769
      • /usr/local/bin/sh
        sh /tmp/MacWrapper.sh
        1⤵
          PID:769
        • /usr/sbin/sh
          sh /tmp/MacWrapper.sh
          1⤵
            PID:769
          • /usr/bin/sh
            sh /tmp/MacWrapper.sh
            1⤵
              PID:769
            • /sbin/sh
              sh /tmp/MacWrapper.sh
              1⤵
                PID:769
              • /bin/sh
                sh /tmp/MacWrapper.sh
                1⤵
                  PID:769
                  • /usr/bin/dirname
                    dirname /tmp/MacWrapper.sh
                    2⤵
                      PID:770

                  Network

                        MITRE ATT&CK Matrix

                        Replay Monitor

                        Loading Replay Monitor...

                        Downloads