Analysis

  • max time kernel
    0s
  • platform
    debian-9_armhf
  • resource
    debian9-armhf-20260513-en
  • resource tags

    arch:armhfimage:debian9-armhf-20260513-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem
  • submitted
    03/07/2026, 22:35

General

  • Target
    Aether_Os/4ndr0imager.sh.null
  • Size 15KB
  • Sample260703-2hxt4agz21
  • SHA256 d8308242d379d623ecf72b2dc0b4085ed7129a7d4dd83c311e8a2ae8aec4e04a
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

Processes

  • /tmp/Aether_Os/4ndr0imager.sh.null
    /tmp/Aether_Os/4ndr0imager.sh.null
    1⤵
      PID:649
    • /usr/local/sbin/bash
      bash /tmp/Aether_Os/4ndr0imager.sh.null
      1⤵
        PID:649
      • /usr/local/bin/bash
        bash /tmp/Aether_Os/4ndr0imager.sh.null
        1⤵
          PID:649
        • /usr/sbin/bash
          bash /tmp/Aether_Os/4ndr0imager.sh.null
          1⤵
            PID:649
          • /usr/bin/bash
            bash /tmp/Aether_Os/4ndr0imager.sh.null
            1⤵
              PID:649
            • /sbin/bash
              bash /tmp/Aether_Os/4ndr0imager.sh.null
              1⤵
                PID:649
              • /bin/bash
                bash /tmp/Aether_Os/4ndr0imager.sh.null
                1⤵
                  PID:649
                  • /usr/bin/tput
                    tput setaf 196
                    2⤵
                      PID:660
                    • /usr/bin/tput
                      tput setaf 46
                      2⤵
                        PID:662
                      • /usr/bin/tput
                        tput setaf 226
                        2⤵
                          PID:663
                        • /usr/bin/tput
                          tput setaf 33
                          2⤵
                            PID:665
                          • /usr/bin/tput
                            tput setaf 201
                            2⤵
                              PID:667
                            • /usr/bin/tput
                              tput setaf 51
                              2⤵
                                PID:668
                              • /usr/bin/tput
                                tput setaf 240
                                2⤵
                                  PID:669
                                • /usr/bin/tput
                                  tput sgr0
                                  2⤵
                                    PID:671
                                  • /bin/date
                                    date "+%Y%m%dT%H%M%S"
                                    2⤵
                                      PID:675

                                  Network

                                        MITRE ATT&CK Matrix

                                        Replay Monitor

                                        Loading Replay Monitor...

                                        Downloads