General
- Target rimworld_royalty_1_6_4633_rev1245_86287.sh
- Size 45.4MB
- Sample260808-2n6n7awblb
- SHA256 6aceb8594648b585f34924d08f669d1eee4da8c6de0e9a96edc05b5bd6214d13
- MD5 e871dc38ef1fa868c690190ac1297c1e
- SHA1 0d78a4593d91610c3b31f72955e0fdd1189c98e1
- SHA512 1f65bb136f19b2eaa65f14abe789c6f5d7397fb4797b3c2e14914bb7800b0fbeb79a898a87ccbba95f24d1c324b9131013ece5e8d6c34de1eb568fd3a12a20c2
- SSDEEP 786432:PATiWSzmCeLiQHdBHGiNamg5Ig8uNEzMcK9c/f5TYZqgyd:PYrSq/i8WOFk8uWIcK9QsUfd
- TLSH T109A7336DBA8659BDC53BE032A83D900442C582C9010DC5167F6AFD7AF75FE8835F638A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
Behavioral task
behavioral1
Sample
rimworld_royalty_1_6_4633_rev1245_86287.sh
Resource
debian12-armhf-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
rimworld_royalty_1_6_4633_rev1245_86287.sh
Resource
ubuntu2404-amd64-20260126-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target rimworld_royalty_1_6_4633_rev1245_86287.sh
- Size 45.4MB
- SHA256 6aceb8594648b585f34924d08f669d1eee4da8c6de0e9a96edc05b5bd6214d13
- MD5 e871dc38ef1fa868c690190ac1297c1e
- SHA1 0d78a4593d91610c3b31f72955e0fdd1189c98e1
- SHA512 1f65bb136f19b2eaa65f14abe789c6f5d7397fb4797b3c2e14914bb7800b0fbeb79a898a87ccbba95f24d1c324b9131013ece5e8d6c34de1eb568fd3a12a20c2
- SSDEEP 786432:PATiWSzmCeLiQHdBHGiNamg5Ig8uNEzMcK9c/f5TYZqgyd:PYrSq/i8WOFk8uWIcK9QsUfd
- TLSH T109A7336DBA8659BDC53BE032A83D900442C582C9010DC5167F6AFD7AF75FE8835F638A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
File and Directory Permissions Modification
Adversaries may modify file or directory permissions to evade defenses.
-
Executes dropped EXE