General
- Target realtek.sh
- Size 2KB
- Sample260811-rfy92avbmd
- SHA256 63829c58292bd814a4098412f6ff16a70c9f2e6dc343af8f1b2fad9312912544
- MD5 fecde4ac6d1a4e1b931f05fba346c86f
- SHA1 3043edfb8331cf1aae3ce1f438ce2c408d6da187
- SHA512 5f5738e42a31a483e2550285dd65d87ebbc4180e41554da525a22e9a194d12ff8c4181ddab6e8368afdab7843eaecff6b15df3de6b6aaddd3c5989f4e7dd72e8
- TLSH T1DD418FC910458A382CF39E7E71E68C58F3A1A0B720C19F8694FB74B7805DE581D82EDB
- MD5 SHA1 SHA512 TLSH
Score
7/10
Static task
static1
Behavioral task
behavioral1
Sample
realtek.sh
Resource
ubuntu1804-amd64-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
realtek.sh
Resource
debian9-armhf-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral3
Sample
realtek.sh
Resource
debian9-mipsbe-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral4
Sample
realtek.sh
Resource
debian9-mipsel-20260513-en
0 signatures
150 seconds
Malware Config
Targets
-
- Target realtek.sh
- Size 2KB
- SHA256 63829c58292bd814a4098412f6ff16a70c9f2e6dc343af8f1b2fad9312912544
- MD5 fecde4ac6d1a4e1b931f05fba346c86f
- SHA1 3043edfb8331cf1aae3ce1f438ce2c408d6da187
- SHA512 5f5738e42a31a483e2550285dd65d87ebbc4180e41554da525a22e9a194d12ff8c4181ddab6e8368afdab7843eaecff6b15df3de6b6aaddd3c5989f4e7dd72e8
- TLSH T1DD418FC910458A382CF39E7E71E68C58F3A1A0B720C19F8694FB74B7805DE581D82EDB
- MD5 SHA1 SHA512 TLSH
Score7/10-
File and Directory Permissions Modification
Adversaries may modify file or directory permissions to evade defenses.
-
Executes dropped EXE
MITRE ATT&CK Enterprise v16
Defense Evasion
File and Directory Permissions Modification
1Linux and Mac File and Directory Permissions Modification
1Virtualization/Sandbox Evasion
1System Checks
1