7cc56e58006aaebb088fb029ffb73e5ba82d30902074de28066816a1ebb9a78c | Triage™

Login
Reports

Overview

overview

7

Static

static

1

rimworld_1...287.sh

ubuntu-24.04-amd64

7

Sharing

Copy URL Twitter E-mail

General

Target
rimworld_1_6_4633_rev1245_86287.sh
Size 230.5MB
Sample260808-2hheeaff65
SHA256 7cc56e58006aaebb088fb029ffb73e5ba82d30902074de28066816a1ebb9a78c
MD5 33ad69b55e5c9fd81d13e04e85b747e4
SHA1 1de5ab1572fcad6c526783fac2cbfd534d10bd3b
SHA512 4eec332e44d0c8d92b022d9abdfe53ab8301121c9eab68567e98c607b3ec032d95e5f12fe4f84ce8b5b54ef64b98624573a2653c40f91b87f38d2d75841cfa56
SSDEEP 6291456:5NUF9Hb5D1GTd3erHLy2D8+g6MHQ93WFVJPSfaQQnctgJO:AiGrND8FwoTJVS
TLSH
T18FB833B35A5CEC53E13B8037DA2E50424C9AA7810BE794AF7B2BE114C567D84B733D86
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

defense_evasion discovery execution linux persistence

Static task

static1

Behavioral task

behavioral1

Sample

rimworld_1_6_4633_rev1245_86287.sh

Resource

ubuntu2404-amd64-20250619-en

ubuntu-24.04-amd64

9 signatures

150 seconds

defense_evasion discovery execution persistence

Malware Config

Targets

- Target
  rimworld_1_6_4633_rev1245_86287.sh
- Size 230.5MB
- SHA256 7cc56e58006aaebb088fb029ffb73e5ba82d30902074de28066816a1ebb9a78c
- MD5 33ad69b55e5c9fd81d13e04e85b747e4
- SHA1 1de5ab1572fcad6c526783fac2cbfd534d10bd3b
- SHA512 4eec332e44d0c8d92b022d9abdfe53ab8301121c9eab68567e98c607b3ec032d95e5f12fe4f84ce8b5b54ef64b98624573a2653c40f91b87f38d2d75841cfa56
- SSDEEP 6291456:5NUF9Hb5D1GTd3erHLy2D8+g6MHQ93WFVJPSfaQQnctgJO:AiGrND8FwoTJVS
- TLSH
  T18FB833B35A5CEC53E13B8037DA2E50424C9AA7810BE794AF7B2BE114C567D84B733D86
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

defense_evasion discovery execution persistence
- File and Directory Permissions Modification
  Adversaries may modify file or directory permissions to evade defenses.
  defense_evasion
- Executes dropped EXE
behavioral1

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

User Execution

Malicious File

Persistence

Boot or Logon Autostart Execution

XDG Autostart Entries

Privilege Escalation

Boot or Logon Autostart Execution

XDG Autostart Entries

Defense Evasion

File and Directory Permissions Modification

Linux and Mac File and Directory Permissions Modification

Credential Access

Discovery

System Information Discovery

System Network Configuration Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

defense_evasiondiscoveryexecutionpersistence

© 2018-2026

Terms | Privacy