General
- Target cat.sh
- Size 1KB
- Sample260808-vkmctavwhx
- SHA256 7d9f51eec6b55c5331795bb27b6dee3577352777f0fe0d743f5c2313a459ace4
- MD5 579ee58543e16c416a5f1047719c4331
- SHA1 d1ffd51ba748b6e491ae8ec12dca78c0b1fcd61a
- SHA512 a60388b7236ec128da116c82fa29e21f49bc1c0478727eed2a58a44c66a702fa2f558ad74734861799edf8fd143b3c121ee567aa83b3b2516ac588f74b547f16
- TLSH T13231719E1173D21AC1C4CE82B3F946D49676F9C532A0EAB2F9429D3DF1B9D413016A37
- MD5 SHA1 SHA512 TLSH
Score
7/10
Static task
static1
Behavioral task
behavioral1
Sample
cat.sh
Resource
ubuntu1804-amd64-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
cat.sh
Resource
debian9-armhf-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral3
Sample
cat.sh
Resource
debian9-mipsbe-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral4
Sample
cat.sh
Resource
debian9-mipsel-20260513-en
0 signatures
150 seconds
Malware Config
Targets
-
- Target cat.sh
- Size 1KB
- SHA256 7d9f51eec6b55c5331795bb27b6dee3577352777f0fe0d743f5c2313a459ace4
- MD5 579ee58543e16c416a5f1047719c4331
- SHA1 d1ffd51ba748b6e491ae8ec12dca78c0b1fcd61a
- SHA512 a60388b7236ec128da116c82fa29e21f49bc1c0478727eed2a58a44c66a702fa2f558ad74734861799edf8fd143b3c121ee567aa83b3b2516ac588f74b547f16
- TLSH T13231719E1173D21AC1C4CE82B3F946D49676F9C532A0EAB2F9429D3DF1B9D413016A37
- MD5 SHA1 SHA512 TLSH
Score7/10-
File and Directory Permissions Modification
Adversaries may modify file or directory permissions to evade defenses.
-
Executes dropped EXE
-
Enumerates running processes
Discovers information about currently running processes on the system
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Boot or Logon Initialization Scripts
1RC Scripts
1Privilege Escalation
Boot or Logon Autostart Execution
1Boot or Logon Initialization Scripts
1RC Scripts
1