General
- Target e69cad1fc4f37b152dec7c2c8c80b9516ff10a28a04041fdeb0294bd8f0dbf78.sh
- Size 9KB
- Sample260725-11wt3svscy
- SHA256 e69cad1fc4f37b152dec7c2c8c80b9516ff10a28a04041fdeb0294bd8f0dbf78
- MD5 351daac6ec97ffddb26b8e2d86360377
- SHA1 2483acd76189628741372b41a3f0c7c354bc32ec
- SHA512 60143b731743d6e6f3014b2a253b1fc3fda3871466961af6a5825e7c6ae153cdabf95ea9697d5c80be804698e4c98230f971475b585a18a04cf6690955870b67
- SSDEEP 192:8WEPNWcD9Ck0hXmtnTtxLKkT+2Kq801HzZ69UkOaWF+HKmciGSOSo2aH9AZIkw:8xP8ClXtTtxL3yzItbkUF+FciG1S4
- TLSH T1132276E1F8A0DD38378DC03EA44E9581354F142B05492C68B59FE4646F7D6A4A3BC7FA
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
e69cad1fc4f37b152dec7c2c8c80b9516ff10a28a04041fdeb0294bd8f0dbf78.sh
Resource
ubuntu1804-amd64-20260513-en
Behavioral task
behavioral2
Sample
e69cad1fc4f37b152dec7c2c8c80b9516ff10a28a04041fdeb0294bd8f0dbf78.sh
Resource
debian9-armhf-20260513-en
Behavioral task
behavioral3
Sample
e69cad1fc4f37b152dec7c2c8c80b9516ff10a28a04041fdeb0294bd8f0dbf78.sh
Resource
debian9-mipsbe-20260513-en
Behavioral task
behavioral4
Sample
e69cad1fc4f37b152dec7c2c8c80b9516ff10a28a04041fdeb0294bd8f0dbf78.sh
Resource
debian9-mipsel-20260513-en
Malware Config
Targets
-
- Target e69cad1fc4f37b152dec7c2c8c80b9516ff10a28a04041fdeb0294bd8f0dbf78.sh
- Size 9KB
- SHA256 e69cad1fc4f37b152dec7c2c8c80b9516ff10a28a04041fdeb0294bd8f0dbf78
- MD5 351daac6ec97ffddb26b8e2d86360377
- SHA1 2483acd76189628741372b41a3f0c7c354bc32ec
- SHA512 60143b731743d6e6f3014b2a253b1fc3fda3871466961af6a5825e7c6ae153cdabf95ea9697d5c80be804698e4c98230f971475b585a18a04cf6690955870b67
- SSDEEP 192:8WEPNWcD9Ck0hXmtnTtxLKkT+2Kq801HzZ69UkOaWF+HKmciGSOSo2aH9AZIkw:8xP8ClXtTtxL3yzItbkUF+FciG1S4
- TLSH T1132276E1F8A0DD38378DC03EA44E9581354F142B05492C68B59FE4646F7D6A4A3BC7FA
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Creates/modifies Cron job
Cron allows running tasks on a schedule, and is commonly used for malware persistence.
-
Enumerates running processes
Discovers information about currently running processes on the system
-
Modifies systemd
Adds/ modifies systemd service files. Likely to achieve persistence.
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1XDG Autostart Entries
1Create or Modify System Process
1Systemd Service
1Scheduled Task/Job
1Cron
1