General
- Target gpon.sh
- Size 788B
- Sample260802-27menagq2z
- SHA256 f1e420fee19df82b35d05e445eaeab7cb1e8998665794898e3c0049b7cfde7aa
- MD5 7ccbf4dccac4bb7e5cd7b9c3b6513c75
- SHA1 1578cfef86c5ad6eedd87f65ae598026c16acd7e
- SHA512 b2e08e81327daebe8b1e1148f12f62a2b46deb224aef0a6f1d5a3e3c2190820386ceab258ea4a749cd79bedffb6928fa1b10fcf13322d75d60342766895d0530
- TLSH T16B019CCDDCD54170FA488A2A75BA6691E34D694F48C82E0DB01EDBA0DF4C961B21B737
- MD5 SHA1 SHA512 TLSH
Score
7/10
Static task
static1
Behavioral task
behavioral1
Sample
gpon.sh
Resource
ubuntu1804-amd64-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
gpon.sh
Resource
debian9-armhf-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral3
Sample
gpon.sh
Resource
debian9-mipsbe-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral4
Sample
gpon.sh
Resource
debian9-mipsel-20260513-en
0 signatures
150 seconds
Malware Config
Targets
-
- Target gpon.sh
- Size 788B
- SHA256 f1e420fee19df82b35d05e445eaeab7cb1e8998665794898e3c0049b7cfde7aa
- MD5 7ccbf4dccac4bb7e5cd7b9c3b6513c75
- SHA1 1578cfef86c5ad6eedd87f65ae598026c16acd7e
- SHA512 b2e08e81327daebe8b1e1148f12f62a2b46deb224aef0a6f1d5a3e3c2190820386ceab258ea4a749cd79bedffb6928fa1b10fcf13322d75d60342766895d0530
- TLSH T16B019CCDDCD54170FA488A2A75BA6691E34D694F48C82E0DB01EDBA0DF4C961B21B737
- MD5 SHA1 SHA512 TLSH
Score7/10-
File and Directory Permissions Modification
Adversaries may modify file or directory permissions to evade defenses.
-
Executes dropped EXE