General
- Target install.sh
- Size 5KB
- Sample260728-pgsgrswybs
- SHA256 99ec9427b25bac5fc2fb67fc5911f880379412b9627aa2fe9cf2740f549b14c2
- MD5 029999eccfe65fe13cb1597d8d7100c3
- SHA1 3cdfff515ee2dc813007511d81a3d9d4dc563ce3
- SHA512 ef5523332c820a60ca2d1bc94db1516b755df3c875ad02c44bf020f8c4eacba5a8c462609de58e6c9230cc133583b40142aed9d3da5b8b6a1f63f6d682151c9b
- SSDEEP 96:KqNlkVPoeLFrjfVcj/pxrsJGVsO5Ff7la139TlF1SrHJIe8KGwjemfMTs/WEpYwu:/8DLFU/nrqS7g139TP1SrHJrGwjZMwpu
- TLSH T1FAC1326B7C4955733B1CC3FC4E471010F606012F58789968F4EF51A43F963A9A26FBAA
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
install.sh
Resource
ubuntu1804-amd64-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
install.sh
Resource
debian9-armhf-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral3
Sample
install.sh
Resource
debian9-mipsbe-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral4
Sample
install.sh
Resource
debian9-mipsel-20260513-en
0 signatures
150 seconds
Malware Config
Targets
-
- Target install.sh
- Size 5KB
- SHA256 99ec9427b25bac5fc2fb67fc5911f880379412b9627aa2fe9cf2740f549b14c2
- MD5 029999eccfe65fe13cb1597d8d7100c3
- SHA1 3cdfff515ee2dc813007511d81a3d9d4dc563ce3
- SHA512 ef5523332c820a60ca2d1bc94db1516b755df3c875ad02c44bf020f8c4eacba5a8c462609de58e6c9230cc133583b40142aed9d3da5b8b6a1f63f6d682151c9b
- SSDEEP 96:KqNlkVPoeLFrjfVcj/pxrsJGVsO5Ff7la139TlF1SrHJIe8KGwjemfMTs/WEpYwu:/8DLFU/nrqS7g139TP1SrHJrGwjZMwpu
- TLSH T1FAC1326B7C4955733B1CC3FC4E471010F606012F58789968F4EF51A43F963A9A26FBAA
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Abuse Elevation Control Mechanism: Sudo and Sudo Caching
Abuse sudo or cached sudo credentials to execute code.
MITRE ATT&CK Enterprise v16
Defense Evasion
Abuse Elevation Control Mechanism
1Sudo and Sudo Caching
1Deobfuscate/Decode Files or Information
1Virtualization/Sandbox Evasion
1System Checks
1