General
- Target wr.php.sh
- Size 26KB
- Sample260801-v17cxsec23
- SHA256 01067bc1b1b5c8477002e1c04ce55fa4bf4c6ad2aa2049a53dd895c756413830
- MD5 0bf33c127e244004411b7eab4bc15b5f
- SHA1 3b57290dd8292bc908cfc6e7f4f60a02c14e8c93
- SHA512 9df0b61c281b126cfb29536090a404608b4c80d191348cccc1108b491b6924e93177e1d207333139081880a305305cfbc6e7af9cfa9bf5ae2fae5ea54aa18444
- SSDEEP 768:Q8vCB+25j6es8Rk9FYpMSUpi+20qUpi+20YQX:Q8l25JCd2QX
- TLSH T109C27D956A867C44BEC98A3E4CBD2B1D6DF5C3D1324942AC3D8A3C71DC11FACD618B1A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
Behavioral task
behavioral1
Sample
wr.php.sh
Resource
ubuntu1804-amd64-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
wr.php.sh
Resource
debian9-armhf-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral3
Sample
wr.php.sh
Resource
debian9-mipsbe-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral4
Sample
wr.php.sh
Resource
debian9-mipsel-20260513-en
0 signatures
150 seconds
Malware Config
Targets
-
- Target wr.php.sh
- Size 26KB
- SHA256 01067bc1b1b5c8477002e1c04ce55fa4bf4c6ad2aa2049a53dd895c756413830
- MD5 0bf33c127e244004411b7eab4bc15b5f
- SHA1 3b57290dd8292bc908cfc6e7f4f60a02c14e8c93
- SHA512 9df0b61c281b126cfb29536090a404608b4c80d191348cccc1108b491b6924e93177e1d207333139081880a305305cfbc6e7af9cfa9bf5ae2fae5ea54aa18444
- SSDEEP 768:Q8vCB+25j6es8Rk9FYpMSUpi+20qUpi+20YQX:Q8l25JCd2QX
- TLSH T109C27D956A867C44BEC98A3E4CBD2B1D6DF5C3D1324942AC3D8A3C71DC11FACD618B1A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
File and Directory Permissions Modification
Adversaries may modify file or directory permissions to evade defenses.