General
- Target cat.sh
- Size 1KB
- Sample260806-ywptvshr51
- SHA256 6a8c1190d015949e3451cf38c2a5373b1def1bbd24b9599cfe533ae956356c72
- MD5 cdffbebdcab69edbe8b42fd15544a1fb
- SHA1 56091319dc4606582ce869dee8879b745a8600fd
- SHA512 4d54b15f9facce59053e9fb4ce5d0981a1c754bdeadabb194c03dd69d4cad79bf2018eaa64faeaa0a19f2ff76204bea897a9c85b97e99019c4980c901fbd30c2
- TLSH T12731548931716EB18A8CCF09B0E146E45247EDC5B2970AF2F4C21E2BA9D9E40BE15A35
- MD5 SHA1 SHA512 TLSH
Static task
static1
Behavioral task
behavioral1
Sample
cat.sh
Resource
ubuntu1804-amd64-20260513-en
Behavioral task
behavioral2
Sample
cat.sh
Resource
debian9-armhf-20260513-en
Behavioral task
behavioral3
Sample
cat.sh
Resource
debian9-mipsbe-20260513-en
Behavioral task
behavioral4
Sample
cat.sh
Resource
debian9-mipsel-20260513-en
Malware Config
Targets
-
- Target cat.sh
- Size 1KB
- SHA256 6a8c1190d015949e3451cf38c2a5373b1def1bbd24b9599cfe533ae956356c72
- MD5 cdffbebdcab69edbe8b42fd15544a1fb
- SHA1 56091319dc4606582ce869dee8879b745a8600fd
- SHA512 4d54b15f9facce59053e9fb4ce5d0981a1c754bdeadabb194c03dd69d4cad79bf2018eaa64faeaa0a19f2ff76204bea897a9c85b97e99019c4980c901fbd30c2
- TLSH T12731548931716EB18A8CCF09B0E146E45247EDC5B2970AF2F4C21E2BA9D9E40BE15A35
- MD5 SHA1 SHA512 TLSH
Score7/10-
File and Directory Permissions Modification
Adversaries may modify file or directory permissions to evade defenses.
-
Executes dropped EXE
-
Enumerates running processes
Discovers information about currently running processes on the system
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Boot or Logon Initialization Scripts
1RC Scripts
1Privilege Escalation
Boot or Logon Autostart Execution
1Boot or Logon Initialization Scripts
1RC Scripts
1Defense Evasion
File and Directory Permissions Modification
1Linux and Mac File and Directory Permissions Modification
1Virtualization/Sandbox Evasion
1System Checks
1