General
- Target WSW0.sh
- Size 263B
- Sample260725-cd72tsxvez
- SHA256 1f4cefdd80b7cffdc0e8a47d9ca6d4fa663e9512cbf7cc31fb0e6d7175490c21
- MD5 a70a6fd3a35a4dadd0498518e2de1988
- SHA1 850faae79fffcfde04a21139f26240f009e93448
- SHA512 3c6ddffcaa47c7bc5a778216829655a9918d8bd45f78b5bec42fab07a59bfa107a135f1dabea83a36c1b1ea1db8f09a31b15bb7a3975d75975e7f9854c7c0c65
- TLSH T18DD0955297E305B044614843D1C3A400F1000B3F8DF9C21E7D0BA4705F5874DF0C17D4
- MD5 SHA1 SHA512 TLSH
Score
7/10
Static task
static1
Behavioral task
behavioral1
Sample
WSW0.sh
Resource
ubuntu1804-amd64-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
WSW0.sh
Resource
debian9-armhf-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral3
Sample
WSW0.sh
Resource
debian9-mipsbe-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral4
Sample
WSW0.sh
Resource
debian9-mipsel-20260513-en
0 signatures
150 seconds
Malware Config
Targets
-
- Target WSW0.sh
- Size 263B
- SHA256 1f4cefdd80b7cffdc0e8a47d9ca6d4fa663e9512cbf7cc31fb0e6d7175490c21
- MD5 a70a6fd3a35a4dadd0498518e2de1988
- SHA1 850faae79fffcfde04a21139f26240f009e93448
- SHA512 3c6ddffcaa47c7bc5a778216829655a9918d8bd45f78b5bec42fab07a59bfa107a135f1dabea83a36c1b1ea1db8f09a31b15bb7a3975d75975e7f9854c7c0c65
- TLSH T18DD0955297E305B044614843D1C3A400F1000B3F8DF9C21E7D0BA4705F5874DF0C17D4
- MD5 SHA1 SHA512 TLSH
Score7/10-
File and Directory Permissions Modification
Adversaries may modify file or directory permissions to evade defenses.
-
Executes dropped EXE
-
OS Credential Dumping
Adversaries may attempt to dump credentials to use it in password cracking.