General
- Target nullnet_bash.sh
- Size 2KB
- Sample260721-ph16astsbz
- SHA256 2040185beb934da4c451dff56f113c7644d9edaf34ed61916407efb99651d94b
- MD5 dd3fff0bbcb2f1aab618c8c1a06a83ef
- SHA1 5beece3faf24688978386fed90cf910c66664a58
- SHA512 01175c8c15df14a71e8a02f5a3a7d143209babe71736bd3a645721fe58a830fab1cd130f5ea8c521202ce2dbf22c5e5db4a47c843ecdec0d4d6ab136086bb99d
- TLSH T1245146C8737581303FB2E97261E95BC422D0AA9390E56FC2B0F6BFA1518CE2D7094B81
- MD5 SHA1 SHA512 TLSH
Score
7/10
Static task
static1
Behavioral task
behavioral1
Sample
nullnet_bash.sh
Resource
ubuntu1804-amd64-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
nullnet_bash.sh
Resource
debian9-armhf-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral3
Sample
nullnet_bash.sh
Resource
debian9-mipsbe-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral4
Sample
nullnet_bash.sh
Resource
debian9-mipsel-20260513-en
0 signatures
150 seconds
Malware Config
Targets
-
- Target nullnet_bash.sh
- Size 2KB
- SHA256 2040185beb934da4c451dff56f113c7644d9edaf34ed61916407efb99651d94b
- MD5 dd3fff0bbcb2f1aab618c8c1a06a83ef
- SHA1 5beece3faf24688978386fed90cf910c66664a58
- SHA512 01175c8c15df14a71e8a02f5a3a7d143209babe71736bd3a645721fe58a830fab1cd130f5ea8c521202ce2dbf22c5e5db4a47c843ecdec0d4d6ab136086bb99d
- TLSH T1245146C8737581303FB2E97261E95BC422D0AA9390E56FC2B0F6BFA1518CE2D7094B81
- MD5 SHA1 SHA512 TLSH
Score7/10-
File and Directory Permissions Modification
Adversaries may modify file or directory permissions to evade defenses.
-
Executes dropped EXE
MITRE ATT&CK Enterprise v16
Defense Evasion
File and Directory Permissions Modification
1Linux and Mac File and Directory Permissions Modification
1Virtualization/Sandbox Evasion
1System Checks
1