General
- Target _224cfaa51b4d5d7be3808b20da50357e24e42f3e38072555b027e20f928d798b.sh
- Size 12KB
- Sample260709-bq5lssbs9k
- SHA256 224cfaa51b4d5d7be3808b20da50357e24e42f3e38072555b027e20f928d798b
- MD5 a73745b23b459f82a2308a565b202087
- SHA1 0f123dfba223bcce920ce26189d5422e70408040
- SHA512 8b48545e976ebe6d1d78af93b39de8870f867f65e18b58ddc9c645d9f19c455d099ecb632bae98734881fec55baa75bb0ed9e9d2d41769f8b1986c5d32237285
- SSDEEP 192:hFBmNsJZr5PBjTAIny+yI9sZ+ZRVPI/iPlpUcFoEtofV3B:xJJYLvSTycTGfV3B
- TLSH T1074214827951B9B03D5F4439157B60013612241F6E203C39B4DE6A612FDD3AAB2FEBB6
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
_224cfaa51b4d5d7be3808b20da50357e24e42f3e38072555b027e20f928d798b.sh
Resource
ubuntu1804-amd64-20260513-en
Behavioral task
behavioral2
Sample
_224cfaa51b4d5d7be3808b20da50357e24e42f3e38072555b027e20f928d798b.sh
Resource
debian9-armhf-20260513-en
Behavioral task
behavioral3
Sample
_224cfaa51b4d5d7be3808b20da50357e24e42f3e38072555b027e20f928d798b.sh
Resource
debian9-mipsbe-20260513-en
Behavioral task
behavioral4
Sample
_224cfaa51b4d5d7be3808b20da50357e24e42f3e38072555b027e20f928d798b.sh
Resource
debian9-mipsel-20260513-en
Malware Config
Targets
-
- Target _224cfaa51b4d5d7be3808b20da50357e24e42f3e38072555b027e20f928d798b.sh
- Size 12KB
- SHA256 224cfaa51b4d5d7be3808b20da50357e24e42f3e38072555b027e20f928d798b
- MD5 a73745b23b459f82a2308a565b202087
- SHA1 0f123dfba223bcce920ce26189d5422e70408040
- SHA512 8b48545e976ebe6d1d78af93b39de8870f867f65e18b58ddc9c645d9f19c455d099ecb632bae98734881fec55baa75bb0ed9e9d2d41769f8b1986c5d32237285
- SSDEEP 192:hFBmNsJZr5PBjTAIny+yI9sZ+ZRVPI/iPlpUcFoEtofV3B:xJJYLvSTycTGfV3B
- TLSH T1074214827951B9B03D5F4439157B60013612241F6E203C39B4DE6A612FDD3AAB2FEBB6
- MD5 SHA1 SHA512 SSDEEP TLSH
File and Directory Permissions Modification
Adversaries may modify file or directory permissions to evade defenses.
Executes dropped EXE
Creates/modifies Cron job
Cron allows running tasks on a schedule, and is commonly used for malware persistence.
Enumerates running processes
Discovers information about currently running processes on the system
MITRE ATT&CK Enterprise v16
Defense Evasion
File and Directory Permissions Modification
1Linux and Mac File and Directory Permissions Modification
1Virtualization/Sandbox Evasion
1System Checks
1