General
- Target telnet.sh
- Size 1KB
- Sample260717-25l14scw2x
- SHA256 a2dd8c859251c361c46d3670536e81d85acaa44ac938f3057bcecdf50b2ad5ee
- MD5 ac6af3156b38400a15e7bcba1524bccd
- SHA1 89f9503020ff989369627a45d786c56a11d6a40b
- SHA512 73b1862b356a9cdf470aa23d87f8956baae6b6a09b0130b4f4831fb756b536314d8a2209a55414457711ed319392075515f0dfd27b9c746e38dd7a3b7e2a0b2d
- TLSH T10E3101CD32B09251C649FF01F3E1CBD6AE45FDC866940E7AE4C11CB1486DE8D3865A36
- MD5 SHA1 SHA512 TLSH
Static task
static1
Behavioral task
behavioral1
Sample
telnet.sh
Resource
ubuntu1804-amd64-20260513-en
Behavioral task
behavioral2
Sample
telnet.sh
Resource
debian9-armhf-20260513-en
Behavioral task
behavioral3
Sample
telnet.sh
Resource
debian9-mipsbe-20260513-en
Behavioral task
behavioral4
Sample
telnet.sh
Resource
debian9-mipsel-20260513-en
Malware Config
Targets
-
- Target telnet.sh
- Size 1KB
- SHA256 a2dd8c859251c361c46d3670536e81d85acaa44ac938f3057bcecdf50b2ad5ee
- MD5 ac6af3156b38400a15e7bcba1524bccd
- SHA1 89f9503020ff989369627a45d786c56a11d6a40b
- SHA512 73b1862b356a9cdf470aa23d87f8956baae6b6a09b0130b4f4831fb756b536314d8a2209a55414457711ed319392075515f0dfd27b9c746e38dd7a3b7e2a0b2d
- TLSH T10E3101CD32B09251C649FF01F3E1CBD6AE45FDC866940E7AE4C11CB1486DE8D3865A36
- MD5 SHA1 SHA512 TLSH
Score7/10-
File and Directory Permissions Modification
Adversaries may modify file or directory permissions to evade defenses.
-
Executes dropped EXE
-
Enumerates running processes
Discovers information about currently running processes on the system
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Boot or Logon Initialization Scripts
1RC Scripts
1Privilege Escalation
Boot or Logon Autostart Execution
1Boot or Logon Initialization Scripts
1RC Scripts
1Defense Evasion
File and Directory Permissions Modification
1Linux and Mac File and Directory Permissions Modification
1Virtualization/Sandbox Evasion
1System Checks
1