Overview
overview
7Static
static
1rescue/res...ded.sh
ubuntu-18.04-amd64
1rescue/res...ded.sh
debian-9-armhf
1rescue/res...ded.sh
debian-9-mips
rescue/res...ded.sh
debian-9-mipsel
rescue/rescue.sh
ubuntu-18.04-amd64
7rescue/rescue.sh
debian-9-armhf
1rescue/rescue.sh
debian-9-mips
rescue/rescue.sh
debian-9-mipsel
Analysis
- max time kernel
0s - platform
debian-9_armhf - resource
debian9-armhf-20260513-en - resource tags
arch:armhfimage:debian9-armhf-20260513-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem - submitted
24/07/2026, 06:14
Static task
static1
Behavioral task
behavioral1
Sample
rescue/rescue-unattended.sh
Resource
ubuntu1804-amd64-20260513-en
Behavioral task
behavioral2
Sample
rescue/rescue-unattended.sh
Resource
debian9-armhf-20260513-en
Behavioral task
behavioral3
Sample
rescue/rescue-unattended.sh
Resource
debian9-mipsbe-20260513-en
Behavioral task
behavioral4
Sample
rescue/rescue-unattended.sh
Resource
debian9-mipsel-20260513-en
Behavioral task
behavioral5
Sample
rescue/rescue.sh
Resource
ubuntu1804-amd64-20260513-en
Behavioral task
behavioral6
Sample
rescue/rescue.sh
Resource
debian9-armhf-20260513-en
Behavioral task
behavioral7
Sample
rescue/rescue.sh
Resource
debian9-mipsbe-20260513-en
Behavioral task
behavioral8
Sample
rescue/rescue.sh
Resource
debian9-mipsel-20260513-en
General
- Target rescue/rescue-unattended.sh
- Size 9KB
- Sample260724-gzedvsef88
- SHA256 fca0a8f46bc42b49a9d56e23d9dc515062bc6c18abae958924ca4faf715effc1
- MD5 6f4b30d9a593cc852ce146b00ecaf6bd
- SHA1 570fbeee63ec5523d9c1136dac39a8f881ff183e
- SHA512 8e39ff27941cecc8d839998c76fce618acc47d8d4b23249b7609f7c398ae445ec9c15981ec217188c057960b36fd24531166c07ef50caacd613d99a02c8455c1
- SSDEEP 192:Fb0OtPFudK6lq/psbKzZ/IUWSralKKrkaEGqF1ZfUpHvNC:FY86U/psWzE1waEGqF7+1C
- TLSH T19C1293A1BAC025F0150B80BEAD5A4545365E520B6D085CA8F48C756C3FF193C67B6BBF
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
Processes
-
/tmp/rescue/rescue-unattended.sh/tmp/rescue/rescue-unattended.sh1⤵PID:651
-
/usr/local/sbin/bashbash /tmp/rescue/rescue-unattended.sh1⤵PID:651
-
/usr/local/bin/bashbash /tmp/rescue/rescue-unattended.sh1⤵PID:651
-
/usr/sbin/bashbash /tmp/rescue/rescue-unattended.sh1⤵PID:651
-
/usr/bin/bashbash /tmp/rescue/rescue-unattended.sh1⤵PID:651
-
/sbin/bashbash /tmp/rescue/rescue-unattended.sh1⤵PID:651
-
/bin/bashbash /tmp/rescue/rescue-unattended.sh1⤵PID:651