General
- Target WSW0.sh
- Size 263B
- Sample260704-jrwdhsgy7n
- SHA256 571131d40c836c5f50e831e2b0605c79194268e15dcc2878dae87026cc0a1473
- MD5 1a147e2409ce71713f7d07000de59bda
- SHA1 a90c6610379623d0f43dac676f8cfe4ac36d33be
- SHA512 ff4df8e8db9639dc8243b64a001584507299ecce5311cf467dca513ab3530c136ec376f16e3defeeace0450b62602477b25d4eb8918059e2ade3107c999cbc5d
- TLSH T1D1D097A22C7306B884361E90E0E77C20B10D0B3E8C52826DB51358306F0070EF0C0365
- MD5 SHA1 SHA512 TLSH
Score
7/10
Static task
static1
Behavioral task
behavioral1
Sample
WSW0.sh
Resource
ubuntu1804-amd64-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
WSW0.sh
Resource
debian9-armhf-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral3
Sample
WSW0.sh
Resource
debian9-mipsbe-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral4
Sample
WSW0.sh
Resource
debian9-mipsel-20260513-en
0 signatures
150 seconds
Malware Config
Targets
-
- Target WSW0.sh
- Size 263B
- SHA256 571131d40c836c5f50e831e2b0605c79194268e15dcc2878dae87026cc0a1473
- MD5 1a147e2409ce71713f7d07000de59bda
- SHA1 a90c6610379623d0f43dac676f8cfe4ac36d33be
- SHA512 ff4df8e8db9639dc8243b64a001584507299ecce5311cf467dca513ab3530c136ec376f16e3defeeace0450b62602477b25d4eb8918059e2ade3107c999cbc5d
- TLSH T1D1D097A22C7306B884361E90E0E77C20B10D0B3E8C52826DB51358306F0070EF0C0365
- MD5 SHA1 SHA512 TLSH
Score7/10-
File and Directory Permissions Modification
Adversaries may modify file or directory permissions to evade defenses.
-
Executes dropped EXE
-
OS Credential Dumping
Adversaries may attempt to dump credentials to use it in password cracking.