General
- Target zyxel.sh
- Size 2KB
- Sample260811-rfvlvaeg26
- SHA256 be4afec9146be47c8e52868b022ec94e39914fef6dc8883703c634d0dc0ff9af
- MD5 ad3d03a84d3e63175fd7382219559441
- SHA1 99df766004d1b58ba084092329c1db5567665db7
- SHA512 960c75e168b4e44e06d943da4a0933dcf159ab27e2b70f34f8a28d5d23ddae24acae097e57c63c513ef6a31796c35a8e61c1eefbb5f8c9baaa8be9039ae03565
- TLSH T1764159C910458A782CF29E6E71E98C58F3E2A0B720C19FC6D4FB35B7414DE541D82E9B
- MD5 SHA1 SHA512 TLSH
Score
7/10
Static task
static1
Behavioral task
behavioral1
Sample
zyxel.sh
Resource
ubuntu1804-amd64-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
zyxel.sh
Resource
debian9-armhf-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral3
Sample
zyxel.sh
Resource
debian9-mipsbe-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral4
Sample
zyxel.sh
Resource
debian9-mipsel-20260513-en
0 signatures
150 seconds
Malware Config
Targets
-
- Target zyxel.sh
- Size 2KB
- SHA256 be4afec9146be47c8e52868b022ec94e39914fef6dc8883703c634d0dc0ff9af
- MD5 ad3d03a84d3e63175fd7382219559441
- SHA1 99df766004d1b58ba084092329c1db5567665db7
- SHA512 960c75e168b4e44e06d943da4a0933dcf159ab27e2b70f34f8a28d5d23ddae24acae097e57c63c513ef6a31796c35a8e61c1eefbb5f8c9baaa8be9039ae03565
- TLSH T1764159C910458A782CF29E6E71E98C58F3E2A0B720C19FC6D4FB35B7414DE541D82E9B
- MD5 SHA1 SHA512 TLSH
Score7/10-
File and Directory Permissions Modification
Adversaries may modify file or directory permissions to evade defenses.
-
Executes dropped EXE
MITRE ATT&CK Enterprise v16
Defense Evasion
File and Directory Permissions Modification
1Linux and Mac File and Directory Permissions Modification
1Virtualization/Sandbox Evasion
1System Checks
1