General
- Target wr.php.sh
- Size 26KB
- Sample260723-appnhsed24
- SHA256 1d0a74bde7856d5e18170590fd2424281001c93833940de6f95dbba1028f57cc
- MD5 d19d638620d9c13b9d382f0a3261fda6
- SHA1 3a01f77c3717e9bfd15c01b0e61eb6bfa54b650a
- SHA512 1e27ad0d79cc60bff90bb62be4e1fa4f3d4497a43708245e5ed3dfd32d83f65c0df3194df08c01e96a1d7b0a55340509b284303b516f8e1cdea00da72dd17460
- SSDEEP 768:us8vCB+25j6es8Rg9FYpMSUpi+20qUpi+20YQX:Z8l25Jmd2QX
- TLSH T1B1C27D966A867C44BEC94A3E4CBD2B1D6DF5C3D1324942AC3D8B3C719C11FACD618B1A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
Behavioral task
behavioral1
Sample
wr.php.sh
Resource
ubuntu1804-amd64-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
wr.php.sh
Resource
debian9-armhf-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral3
Sample
wr.php.sh
Resource
debian9-mipsbe-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral4
Sample
wr.php.sh
Resource
debian9-mipsel-20260513-en
0 signatures
150 seconds
Malware Config
Targets
-
- Target wr.php.sh
- Size 26KB
- SHA256 1d0a74bde7856d5e18170590fd2424281001c93833940de6f95dbba1028f57cc
- MD5 d19d638620d9c13b9d382f0a3261fda6
- SHA1 3a01f77c3717e9bfd15c01b0e61eb6bfa54b650a
- SHA512 1e27ad0d79cc60bff90bb62be4e1fa4f3d4497a43708245e5ed3dfd32d83f65c0df3194df08c01e96a1d7b0a55340509b284303b516f8e1cdea00da72dd17460
- SSDEEP 768:us8vCB+25j6es8Rg9FYpMSUpi+20qUpi+20YQX:Z8l25Jmd2QX
- TLSH T1B1C27D966A867C44BEC94A3E4CBD2B1D6DF5C3D1324942AC3D8B3C719C11FACD618B1A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10File and Directory Permissions Modification
Adversaries may modify file or directory permissions to evade defenses.