Analysis
- max time kernel
0s - platform
debian-9_armhf - resource
debian9-armhf-20260513-en - resource tags
arch:armhfimage:debian9-armhf-20260513-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem - submitted
20/07/2026, 03:53
Static task
static1
Behavioral task
behavioral1
Sample
WP2Shell-main/wp2shell.py
Resource
ubuntu1804-amd64-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
WP2Shell-main/wp2shell.py
Resource
debian9-armhf-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral3
Sample
WP2Shell-main/wp2shell.py
Resource
debian9-mipsbe-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral4
Sample
WP2Shell-main/wp2shell.py
Resource
debian9-mipsel-20260513-en
0 signatures
150 seconds
General
- Target WP2Shell-main/wp2shell.py
- Size 11KB
- Sample260720-ef2c6set7k
- SHA256 c407800a5889bba2bfec711daf99a8dc3ce2cea9fd925b50a446c3ff63652f86
- MD5 9cd2cf03890a500e1025d07d3089ae9a
- SHA1 c20a22a3b14540d3a1a4d9d4c1ceb424d27bd35d
- SHA512 6f34904c0d00a0be9dac881591899c4c6d7429fc5c84470c290d921893270ec34a45156d336ce69ab02bb4c367d0f5271fe685a392f49e21b4452ccd53a08057
- SSDEEP 192:0Qi6upyNH2E0QEEl85Lt95LPM5LpAAVAd+qLr2kQOvx5JM2qValV6DZWESNeh2v2:Ti6FiNR2BA3tT8KOZWg+B1GX
- TLSH T1BA3272105C463863878ACD6CA4759E1233267E13D15A6C70BDAC43E86FB0572CEB97EE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
-
pid Process 654 python3 654 python3 654 python3 654 python3
Processes
-
/tmp/WP2Shell-main/wp2shell.py/tmp/WP2Shell-main/wp2shell.py1⤵PID:654
-
/usr/local/sbin/python3python3 /tmp/WP2Shell-main/wp2shell.py1⤵
- Command and Scripting Interpreter: Python
PID:654
-
/usr/local/bin/python3python3 /tmp/WP2Shell-main/wp2shell.py1⤵
- Command and Scripting Interpreter: Python
PID:654
-
/usr/sbin/python3python3 /tmp/WP2Shell-main/wp2shell.py1⤵
- Command and Scripting Interpreter: Python
PID:654
-
/usr/bin/python3python3 /tmp/WP2Shell-main/wp2shell.py1⤵
- Command and Scripting Interpreter: Python
PID:654