General
- Target telnet.sh
- Size 1KB
- Sample260808-vkctdavwfv
- SHA256 91edac44800a3cebae17f730387fbff80d81ba22f5cea696fbbf437b8717dfc0
- MD5 89bc339c7299fc9374a40742a4fc20e7
- SHA1 d87aa16d58aabb3f480ddc45658030f4f63485ff
- SHA512 924ba6288c57254544f4dd1b01637f1e7ab1cb6fb001bafa227612f18acf2d4aab31f597bd51ce6f0eeaac4d21afc5872fcdb05ce3da725c983fad4a0e92e7f3
- TLSH T1CF3173DE12B3A25AC184CE42B3F942C4A675F5C43290EA72F9C29C39F179EC13455A37
- MD5 SHA1 SHA512 TLSH
Static task
static1
Behavioral task
behavioral1
Sample
telnet.sh
Resource
ubuntu1804-amd64-20260513-en
Behavioral task
behavioral2
Sample
telnet.sh
Resource
debian9-armhf-20260513-en
Behavioral task
behavioral3
Sample
telnet.sh
Resource
debian9-mipsbe-20260513-en
Behavioral task
behavioral4
Sample
telnet.sh
Resource
debian9-mipsel-20260513-en
Malware Config
Targets
-
- Target telnet.sh
- Size 1KB
- SHA256 91edac44800a3cebae17f730387fbff80d81ba22f5cea696fbbf437b8717dfc0
- MD5 89bc339c7299fc9374a40742a4fc20e7
- SHA1 d87aa16d58aabb3f480ddc45658030f4f63485ff
- SHA512 924ba6288c57254544f4dd1b01637f1e7ab1cb6fb001bafa227612f18acf2d4aab31f597bd51ce6f0eeaac4d21afc5872fcdb05ce3da725c983fad4a0e92e7f3
- TLSH T1CF3173DE12B3A25AC184CE42B3F942C4A675F5C43290EA72F9C29C39F179EC13455A37
- MD5 SHA1 SHA512 TLSH
Score7/10-
File and Directory Permissions Modification
Adversaries may modify file or directory permissions to evade defenses.
-
Executes dropped EXE
-
Enumerates running processes
Discovers information about currently running processes on the system
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Boot or Logon Initialization Scripts
1RC Scripts
1Privilege Escalation
Boot or Logon Autostart Execution
1Boot or Logon Initialization Scripts
1RC Scripts
1Defense Evasion
File and Directory Permissions Modification
1Linux and Mac File and Directory Permissions Modification
1Virtualization/Sandbox Evasion
1System Checks
1