General
- Target lil.sh
- Size 848B
- Sample260717-gnvayafv91
- SHA256 64e7b02ce2afe734c786e5a8a378edd7252672dfdbfb6cbd39805dbe6e750efb
- MD5 4b2d8761f4a71962c44116a657c7ac77
- SHA1 545a5b785b40744a780044debb9c12cb202fe858
- SHA512 51b9b79bedd2c9be96b88afab7e3139f978a3ed5b7eb2f5ce338d714222ddae70d374986e94ed97741dbbe45a174d1de3e63e347a2eba404ac3b2123bbe5bf88
- TLSH T1E901ABCAD560490040EAD95D22D75064F871C3C7164B8F79BF6DB43DEB9CE04B066F88
- MD5 SHA1 SHA512 TLSH
Score
7/10
Static task
static1
Behavioral task
behavioral1
Sample
lil.sh
Resource
ubuntu1804-amd64-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
lil.sh
Resource
debian9-armhf-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral3
Sample
lil.sh
Resource
debian9-mipsbe-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral4
Sample
lil.sh
Resource
debian9-mipsel-20260513-en
0 signatures
150 seconds
Malware Config
Targets
-
- Target lil.sh
- Size 848B
- SHA256 64e7b02ce2afe734c786e5a8a378edd7252672dfdbfb6cbd39805dbe6e750efb
- MD5 4b2d8761f4a71962c44116a657c7ac77
- SHA1 545a5b785b40744a780044debb9c12cb202fe858
- SHA512 51b9b79bedd2c9be96b88afab7e3139f978a3ed5b7eb2f5ce338d714222ddae70d374986e94ed97741dbbe45a174d1de3e63e347a2eba404ac3b2123bbe5bf88
- TLSH T1E901ABCAD560490040EAD95D22D75064F871C3C7164B8F79BF6DB43DEB9CE04B066F88
- MD5 SHA1 SHA512 TLSH
Score7/10-
File and Directory Permissions Modification
Adversaries may modify file or directory permissions to evade defenses.
-
Executes dropped EXE
-
Enumerates running processes
Discovers information about currently running processes on the system