General
- Target install.sh
- Size 5KB
- Sample260709-ph549aas3n
- SHA256 7eb9061a98aae4434e452954ba73a636b80185ea3f19d2089ae01b765a8f8d3f
- MD5 f7ecbf9d6fc5348620f6d60d832f419d
- SHA1 71744bf89dd93dc4db2217095703353a13161cca
- SHA512 47a23c683f71da140a7daeb8237769d22f063753505f0fff568c7277d80c7ed15714ece3b4a02248f147085d44e3ee6de3ecab6d21bcb44528019e8ba1fc0ce6
- SSDEEP 96:MqNVkVPoeLFrjfVcj/pxrsJGVsO5Ff7la139TlF1SrHJIe8KGwjemfMTs/WEpYwu:9YDLFU/nrqS7g139TP1SrHJrGwjZMwpu
- TLSH T1C5C1216B7C4955733B1CC3FC5E871010F606012F58689968F4AF51A43F863ADA26FBAA
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
install.sh
Resource
ubuntu1804-amd64-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
install.sh
Resource
debian9-armhf-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral3
Sample
install.sh
Resource
debian9-mipsbe-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral4
Sample
install.sh
Resource
debian9-mipsel-20260513-en
0 signatures
150 seconds
Malware Config
Targets
-
- Target install.sh
- Size 5KB
- SHA256 7eb9061a98aae4434e452954ba73a636b80185ea3f19d2089ae01b765a8f8d3f
- MD5 f7ecbf9d6fc5348620f6d60d832f419d
- SHA1 71744bf89dd93dc4db2217095703353a13161cca
- SHA512 47a23c683f71da140a7daeb8237769d22f063753505f0fff568c7277d80c7ed15714ece3b4a02248f147085d44e3ee6de3ecab6d21bcb44528019e8ba1fc0ce6
- SSDEEP 96:MqNVkVPoeLFrjfVcj/pxrsJGVsO5Ff7la139TlF1SrHJIe8KGwjemfMTs/WEpYwu:9YDLFU/nrqS7g139TP1SrHJrGwjZMwpu
- TLSH T1C5C1216B7C4955733B1CC3FC5E871010F606012F58689968F4AF51A43F863ADA26FBAA
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Abuse Elevation Control Mechanism: Sudo and Sudo Caching
Abuse sudo or cached sudo credentials to execute code.
MITRE ATT&CK Enterprise v16
Defense Evasion
Abuse Elevation Control Mechanism
1Sudo and Sudo Caching
1Deobfuscate/Decode Files or Information
1Virtualization/Sandbox Evasion
1System Checks
1