General
- Target _812a2969f3ff3641c962dbcb504de4a1b7de78196921a248acef1ecd2e1c8f76.sh
- Size 839B
- Sample260624-krf49saz8s
- SHA256 812a2969f3ff3641c962dbcb504de4a1b7de78196921a248acef1ecd2e1c8f76
- MD5 c986ccb1ca171605c7b919a2ffd645ce
- SHA1 5946313b2421531f4d6d1f2c0a40e957a3d72e87
- SHA512 e2a486f9a4cdd393f9650da2b1546ec370aa9aafc6d49c32162f76787b9f665e3d2fadb2885d782cd81130bee5bb9c36cddad14167f6bac5cc72aa8304916c80
- TLSH T16E0148CA8550A900502A8E6D66D756A0B422D3CE498B0F687FDC6D3DFBEC904F166E88
- MD5 SHA1 SHA512 TLSH
Static task
static1
Behavioral task
behavioral1
Sample
_812a2969f3ff3641c962dbcb504de4a1b7de78196921a248acef1ecd2e1c8f76.sh
Resource
ubuntu1804-amd64-20260513-en
Behavioral task
behavioral2
Sample
_812a2969f3ff3641c962dbcb504de4a1b7de78196921a248acef1ecd2e1c8f76.sh
Resource
debian9-armhf-20260513-en
Behavioral task
behavioral3
Sample
_812a2969f3ff3641c962dbcb504de4a1b7de78196921a248acef1ecd2e1c8f76.sh
Resource
debian9-mipsbe-20260513-en
Behavioral task
behavioral4
Sample
_812a2969f3ff3641c962dbcb504de4a1b7de78196921a248acef1ecd2e1c8f76.sh
Resource
debian9-mipsel-20260513-en
Malware Config
Targets
-
- Target _812a2969f3ff3641c962dbcb504de4a1b7de78196921a248acef1ecd2e1c8f76.sh
- Size 839B
- SHA256 812a2969f3ff3641c962dbcb504de4a1b7de78196921a248acef1ecd2e1c8f76
- MD5 c986ccb1ca171605c7b919a2ffd645ce
- SHA1 5946313b2421531f4d6d1f2c0a40e957a3d72e87
- SHA512 e2a486f9a4cdd393f9650da2b1546ec370aa9aafc6d49c32162f76787b9f665e3d2fadb2885d782cd81130bee5bb9c36cddad14167f6bac5cc72aa8304916c80
- TLSH T16E0148CA8550A900502A8E6D66D756A0B422D3CE498B0F687FDC6D3DFBEC904F166E88
- MD5 SHA1 SHA512 TLSH
Score7/10File and Directory Permissions Modification
Adversaries may modify file or directory permissions to evade defenses.
Deletes itself
Executes dropped EXE
Enumerates running processes
Discovers information about currently running processes on the system
Reads hardware information
Accesses system info like serial numbers, manufacturer names etc.
Reads list of loaded kernel modules
Reads the list of currently loaded kernel modules, possibly to detect virtual environments.
MITRE ATT&CK Enterprise v16
Defense Evasion
File and Directory Permissions Modification
1Linux and Mac File and Directory Permissions Modification
1Virtualization/Sandbox Evasion
2System Checks
1