General
- Target phantom_bash.sh
- Size 536B
- Sample260806-gbepqaek2s
- SHA256 b12e3b32bdf9b4611cf49382fc95dcc37dc906990fc176a8ccf69636458d6a12
- MD5 1e7083e7aeabd141a0a3f3799b32e0a9
- SHA1 93e86f4a175b39ddd85495bd8385257de9234b6b
- SHA512 889872675e327cb05618a53910ff1aa78bb2ed29eb5f1f9129d0d67dc9166b7783bb13be250d873897772e291bcf20327549332e7b811f413776356d0085ed9e
- TLSH T1E2F03085FB14E9336507CE9733A803305747B8FAA4C31656AC627D9A18C9AC97407EB5
- MD5 SHA1 SHA512 TLSH
Score
7/10
Static task
static1
Behavioral task
behavioral1
Sample
phantom_bash.sh
Resource
ubuntu1804-amd64-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
phantom_bash.sh
Resource
debian9-armhf-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral3
Sample
phantom_bash.sh
Resource
debian9-mipsbe-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral4
Sample
phantom_bash.sh
Resource
debian9-mipsel-20260513-en
0 signatures
150 seconds
Malware Config
Targets
-
- Target phantom_bash.sh
- Size 536B
- SHA256 b12e3b32bdf9b4611cf49382fc95dcc37dc906990fc176a8ccf69636458d6a12
- MD5 1e7083e7aeabd141a0a3f3799b32e0a9
- SHA1 93e86f4a175b39ddd85495bd8385257de9234b6b
- SHA512 889872675e327cb05618a53910ff1aa78bb2ed29eb5f1f9129d0d67dc9166b7783bb13be250d873897772e291bcf20327549332e7b811f413776356d0085ed9e
- TLSH T1E2F03085FB14E9336507CE9733A803305747B8FAA4C31656AC627D9A18C9AC97407EB5
- MD5 SHA1 SHA512 TLSH
Score7/10-
File and Directory Permissions Modification
Adversaries may modify file or directory permissions to evade defenses.
-
Executes dropped EXE
MITRE ATT&CK Enterprise v16
Defense Evasion
File and Directory Permissions Modification
1Linux and Mac File and Directory Permissions Modification
1Virtualization/Sandbox Evasion
1System Checks
1