General
- Target ghost.sh
- Size 1KB
- Sample260629-n8dbgset9q
- SHA256 3d266ba060261b8e843926e426300d39277d2ee54497e0a6543428ba7ec6085b
- MD5 ae095e417dd60f8515bbbfc561f39ffb
- SHA1 5fe7eabbd656245a2801c57e95dbbb269fe18a48
- SHA512 a190fbe3b377bf5f53dd537657fdac7fe75247657a90c2078dc678658ceaa8482dd95152eb4cb20bf1d76cfa5c84376eb6ddca6b1895b7c39087c554293f0234
- TLSH T1B0419F8723A0CD717C9A9967B15E45C079C7A48204BE6EE678CDFDE0188FC7CB500EA2
- MD5 SHA1 SHA512 TLSH
Score
7/10
Static task
static1
Behavioral task
behavioral1
Sample
ghost.sh
Resource
ubuntu1804-amd64-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
ghost.sh
Resource
debian9-armhf-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral3
Sample
ghost.sh
Resource
debian9-mipsbe-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral4
Sample
ghost.sh
Resource
debian9-mipsel-20260513-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target ghost.sh
- Size 1KB
- SHA256 3d266ba060261b8e843926e426300d39277d2ee54497e0a6543428ba7ec6085b
- MD5 ae095e417dd60f8515bbbfc561f39ffb
- SHA1 5fe7eabbd656245a2801c57e95dbbb269fe18a48
- SHA512 a190fbe3b377bf5f53dd537657fdac7fe75247657a90c2078dc678658ceaa8482dd95152eb4cb20bf1d76cfa5c84376eb6ddca6b1895b7c39087c554293f0234
- TLSH T1B0419F8723A0CD717C9A9967B15E45C079C7A48204BE6EE678CDFDE0188FC7CB500EA2
- MD5 SHA1 SHA512 TLSH
Score7/10-
File and Directory Permissions Modification
Adversaries may modify file or directory permissions to evade defenses.
-
Executes dropped EXE