Overview
overview
8Static
static
1sample.tar
windows10-2004-x64
1sample.tar
windows11-ltsc_2024-x64
1Linux_for_...ash.sh
ubuntu-18.04-amd64
3Linux_for_...ash.sh
debian-9-armhf
3Linux_for_...ash.sh
debian-9-mips
Linux_for_...ash.sh
debian-9-mipsel
Linux_for_...onf.js
windows10-2004-x64
3Linux_for_...onf.js
windows11-ltsc_2024-x64
8Analysis
- max time kernel
0s - max time network
129s - platform
ubuntu-18.04_amd64 - resource
ubuntu1804-amd64-20260513-en - resource tags
arch:amd64arch:i386image:ubuntu1804-amd64-20260513-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system - submitted
02/07/2026, 00:21
Static task
static1
Behavioral task
behavioral1
Sample
sample.tar
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
sample.tar
Resource
win11ltsc2024-20260629-en
Behavioral task
behavioral3
Sample
Linux_for_Tegra/flash.sh
Resource
ubuntu1804-amd64-20260513-en
Behavioral task
behavioral4
Sample
Linux_for_Tegra/flash.sh
Resource
debian9-armhf-20260513-en
Behavioral task
behavioral5
Sample
Linux_for_Tegra/flash.sh
Resource
debian9-mipsbe-20260513-en
Behavioral task
behavioral6
Sample
Linux_for_Tegra/flash.sh
Resource
debian9-mipsel-20260513-en
Behavioral task
behavioral7
Sample
Linux_for_Tegra/p3701.conf.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
Linux_for_Tegra/p3701.conf.js
Resource
win11ltsc2024-20260629-en
General
- Target Linux_for_Tegra/flash.sh
- Size 132KB
- Sample260702-anhhtagx3l
- SHA256 94b5ab834622cb5a0dcc09ef3314261e06236e086b49cc7c4bdf17286a99b8de
- MD5 a5cbb1f3cd2c9c9fe06c1e080a7cbe54
- SHA1 95b6aa038add0193e95e2d25bb516a4f9c256403
- SHA512 5a7c8067a84d4ff867fd267abb0a270e0883588f8f8037ef67e32adeb921ec04229d13a9491d02f8bb525dfc48d013b5601c1e2910666e435af48d60d833c219
- SSDEEP 3072:gB51EkqTRzwqnTa9sV/cg//RfAuLnrmv06V81kfM:qSTRzwqTa9sVOE
- TLSH T169D3E706FF0C1FE56242C198CF1951CA6F2D4297CE6A2C96B4EC389923797F8C9F8855
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Writes file to tmp directory 1 IoCs
Malware often drops required files in the /tmp directory.
description ioc Process File opened for modification /tmp/sh-thd.ipNAsZ flash.sh
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /tmp/sh-thd.ipNAsZ
- Size 4KB
- SHA256 bb3ae5654530c812375262774f6c5a0c3374d7587399ebf5f9b91227552c5551
- MD5 ae66a6a52cfa5b01581bde3ef42130f4
- SHA1 5f88040bcc005592c7a594e97c3132a3483fc8cb
- SHA512 5e2f5487d9e4371a5f64867bacace15c7a16f87ff9bb5a2f4aeba6cca9d4ca20d12255861f22ce962feb87ee9ab6275040656fb870801651c9aa94ccb53380d1
- SSDEEP 48:9G1o3BlW8LphcUD4aXu1K1Nyesmp/n2qXlV72fDy1X1bsXGs1jwrFiiWXkylTvqy:k1oRl9G1Kees82qz2fDexc1vZyJ8
- TLSH T151A1F10E4EC561791085CFB33AE178A3CE75402B9DB236AD34DC629C6F0A558C2EFB24
- MD5 SHA1 SHA512 SSDEEP TLSH