Overview
overview
6Static
static
1extension/...ain.js
windows10-2004-x64
3extension/...ain.js
windows11-ltsc_2024-x64
3extension/...ort.sh
ubuntu-18.04-amd64
6extension/...ort.sh
debian-9-armhf
6extension/...ort.sh
debian-9-mips
extension/...ort.sh
debian-9-mipsel
extension/...ss.bat
windows10-2004-x64
1extension/...ss.bat
windows11-ltsc_2024-x64
1extension/...ass.sh
ubuntu-18.04-amd64
3extension/...ass.sh
debian-9-armhf
3extension/...ass.sh
debian-9-mips
extension/...ass.sh
debian-9-mipsel
extension/...ver.js
windows10-2004-x64
3extension/...ver.js
windows11-ltsc_2024-x64
3extension/...ent.js
windows10-2004-x64
3extension/...ent.js
windows11-ltsc_2024-x64
3extension/...ess.sh
ubuntu-18.04-amd64
3extension/...ess.sh
debian-9-armhf
3extension/...ess.sh
debian-9-mips
extension/...ess.sh
debian-9-mipsel
extension/...h.html
windows10-2004-x64
3extension/...h.html
windows11-ltsc_2024-x64
3extension/...aph.js
windows10-2004-x64
3extension/...aph.js
windows11-ltsc_2024-x64
3Analysis
- max time kernel
0s - platform
debian-9_armhf - resource
debian9-armhf-20260513-en - resource tags
arch:armhfimage:debian9-armhf-20260513-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem - submitted
17/07/2026, 12:27
Static task
static1
Behavioral task
behavioral1
Sample
extension/dist/main.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
extension/dist/main.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral3
Sample
extension/dist/scripts/connectionReport.sh
Resource
ubuntu1804-amd64-20260513-en
Behavioral task
behavioral4
Sample
extension/dist/scripts/connectionReport.sh
Resource
debian9-armhf-20260513-en
Behavioral task
behavioral5
Sample
extension/dist/scripts/connectionReport.sh
Resource
debian9-mipsbe-20260513-en
Behavioral task
behavioral6
Sample
extension/dist/scripts/connectionReport.sh
Resource
debian9-mipsel-20260513-en
Behavioral task
behavioral7
Sample
extension/dist/scripts/launchSSHAskpass.bat
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
extension/dist/scripts/launchSSHAskpass.bat
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral9
Sample
extension/dist/scripts/launchSSHAskpass.sh
Resource
ubuntu1804-amd64-20260513-en
Behavioral task
behavioral10
Sample
extension/dist/scripts/launchSSHAskpass.sh
Resource
debian9-armhf-20260513-en
Behavioral task
behavioral11
Sample
extension/dist/scripts/launchSSHAskpass.sh
Resource
debian9-mipsbe-20260513-en
Behavioral task
behavioral12
Sample
extension/dist/scripts/launchSSHAskpass.sh
Resource
debian9-mipsel-20260513-en
Behavioral task
behavioral13
Sample
extension/dist/scripts/remoteServer.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral14
Sample
extension/dist/scripts/remoteServer.js
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral15
Sample
extension/dist/scripts/sshAskClient.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral16
Sample
extension/dist/scripts/sshAskClient.js
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral17
Sample
extension/dist/scripts/terminateProcess.sh
Resource
ubuntu1804-amd64-20260513-en
Behavioral task
behavioral18
Sample
extension/dist/scripts/terminateProcess.sh
Resource
debian9-armhf-20260513-en
Behavioral task
behavioral19
Sample
extension/dist/scripts/terminateProcess.sh
Resource
debian9-mipsbe-20260513-en
Behavioral task
behavioral20
Sample
extension/dist/scripts/terminateProcess.sh
Resource
debian9-mipsel-20260513-en
Behavioral task
behavioral21
Sample
extension/media/trafficGraph.html
Resource
win10v2004-20260513-en
Behavioral task
behavioral22
Sample
extension/media/trafficGraph.html
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral23
Sample
extension/media/trafficGraph.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral24
Sample
extension/media/trafficGraph.js
Resource
win11ltsc2024-20260709-en
General
- Target extension/dist/scripts/terminateProcess.sh
- Size 212B
- Sample260717-pmxzfabs4j
- SHA256 3a059155d6e35d0fc28732681f4420549772411f0117f38cc36efffc787311a5
- MD5 8b0ea5e655d3276ad896fc515014548e
- SHA1 332e34520fda0de66efba0518306c6765eb14fec
- SHA512 52be9f537d047305d29d37225fcd007825f82bd1ec4e9457ef34245528f9d31d4fda95e7e685553b2bd871b9e3fd4446c68deeedcdfa7c82e02bd2dfb25cc364
- TLSH T124D0220C7C6A8FB27B413021C6A3830E27CB12A1487E3C0C1AD23838B420390F06E0F8
- MD5 SHA1 SHA512 TLSH
Malware Config
Signatures
- System Network Configuration Discovery 1 TTPs 7 IoCs
Adversaries may gather information about the network configuration of a system.
pid Process 652 sh 652 sh 652 sh 652 sh 652 sh 652 sh 652 terminateProcess.sh
Processes
-
/tmp/extension/dist/scripts/terminateProcess.sh/tmp/extension/dist/scripts/terminateProcess.sh1⤵
- System Network Configuration Discovery
PID:652
-
/usr/local/sbin/shsh /tmp/extension/dist/scripts/terminateProcess.sh1⤵
- System Network Configuration Discovery
PID:652
-
/usr/local/bin/shsh /tmp/extension/dist/scripts/terminateProcess.sh1⤵
- System Network Configuration Discovery
PID:652
-
/usr/sbin/shsh /tmp/extension/dist/scripts/terminateProcess.sh1⤵
- System Network Configuration Discovery
PID:652
-
/usr/bin/shsh /tmp/extension/dist/scripts/terminateProcess.sh1⤵
- System Network Configuration Discovery
PID:652
-
/sbin/shsh /tmp/extension/dist/scripts/terminateProcess.sh1⤵
- System Network Configuration Discovery
PID:652
-
/bin/shsh /tmp/extension/dist/scripts/terminateProcess.sh1⤵
- System Network Configuration Discovery
PID:652