General
- Target zte.sh
- Size 2KB
- Sample260811-rfrvysvblh
- SHA256 260064eb5bb63b69c75fb780bb6390c3beab7cd882bd06d6b0ad738993a47f8b
- MD5 b70321b61272b2a45f9b19030b7b0305
- SHA1 22070a461a9f20ced32ba1574c0365b92d1b9564
- SHA512 8cff261c7937aad5a8b33e086faa6723adfd9021c3ac6d4c7497abba2ba9a596d63a6a2ed736a31545a9ebcdb44ab0065abc5ebe69f624795fbfed248c4e1d82
- TLSH T1C64129CA10458A392CF29E6E71FA8858F3A1A0B720D59F86D4FB35F7404DE541D82EDB
- MD5 SHA1 SHA512 TLSH
Score
7/10
Static task
static1
Behavioral task
behavioral1
Sample
zte.sh
Resource
ubuntu1804-amd64-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
zte.sh
Resource
debian9-armhf-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral3
Sample
zte.sh
Resource
debian9-mipsbe-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral4
Sample
zte.sh
Resource
debian9-mipsel-20260513-en
0 signatures
150 seconds
Malware Config
Targets
-
- Target zte.sh
- Size 2KB
- SHA256 260064eb5bb63b69c75fb780bb6390c3beab7cd882bd06d6b0ad738993a47f8b
- MD5 b70321b61272b2a45f9b19030b7b0305
- SHA1 22070a461a9f20ced32ba1574c0365b92d1b9564
- SHA512 8cff261c7937aad5a8b33e086faa6723adfd9021c3ac6d4c7497abba2ba9a596d63a6a2ed736a31545a9ebcdb44ab0065abc5ebe69f624795fbfed248c4e1d82
- TLSH T1C64129CA10458A392CF29E6E71FA8858F3A1A0B720D59F86D4FB35F7404DE541D82EDB
- MD5 SHA1 SHA512 TLSH
Score7/10-
File and Directory Permissions Modification
Adversaries may modify file or directory permissions to evade defenses.
-
Executes dropped EXE
MITRE ATT&CK Enterprise v16
Defense Evasion
File and Directory Permissions Modification
1Linux and Mac File and Directory Permissions Modification
1Virtualization/Sandbox Evasion
1System Checks
1