Overview

overview

8

Static

static

1

sample.tar

windows10-2004-x64

1

sample.tar

windows11-ltsc_2024-x64

1

Linux_for_...ash.sh

ubuntu-18.04-amd64

3

Linux_for_...ash.sh

debian-9-armhf

3

Linux_for_...ash.sh

debian-9-mips

Linux_for_...ash.sh

debian-9-mipsel

Linux_for_...onf.js

windows10-2004-x64

3

Linux_for_...onf.js

windows11-ltsc_2024-x64

8

Analysis

  • max time kernel
    0s
  • platform
    debian-9_armhf
  • resource
    debian9-armhf-20260513-en
  • resource tags

    arch:armhfimage:debian9-armhf-20260513-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem
  • submitted
    02/07/2026, 00:21

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    Linux_for_Tegra/flash.sh
  • Size 132KB
  • Sample260702-anhhtagx3l
  • SHA256 94b5ab834622cb5a0dcc09ef3314261e06236e086b49cc7c4bdf17286a99b8de
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10

Malware Config

Signatures

  • Writes file to tmp directory 1 IoCs

    Malware often drops required files in the /tmp directory.

Processes

  • /tmp/Linux_for_Tegra/flash.sh
    /tmp/Linux_for_Tegra/flash.sh
    1⤵
    • Writes file to tmp directory
    PID:645
    • /bin/cat
      cat
      2⤵
        PID:665

    Network

          MITRE ATT&CK Matrix

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          sh-thd.iPuryf
          • Path /tmp/sh-thd.iPuryf
          • Size 4KB
          • SHA256 bb3ae5654530c812375262774f6c5a0c3374d7587399ebf5f9b91227552c5551
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download