General
- Target wr.php.sh
- Size 26KB
- Sample260811-zb4b7a1ekd
- SHA256 5b5ffac2a3cbda8adbeb1cf0b854f5dc8324d2d585372e3fdada8548cc7c8823
- MD5 0c8e3425d858df951f0cdf15ffd7b1b5
- SHA1 14066b6e7ed7c9387cd7c676297f8cfe5ffba298
- SHA512 eafd8b3e02831cb70164b113971602438b0ee94f7ccff15e07833f0c645fa6f432a013f119ec2d29cb99862ca046f45de4f35f1bc7d4ed8d6d7ff867eb7bf244
- SSDEEP 768:k8vCB+25j6es8RF9FYpMSUpi+20qUpi+20YQX:k8l25Jjd2QX
- TLSH T162C28D966A867C44BEC98A3E4CBD2B1D6DF4C3D1324942AC3D8A3C719C11F9CC618B1A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
Behavioral task
behavioral1
Sample
wr.php.sh
Resource
ubuntu1804-amd64-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
wr.php.sh
Resource
debian9-armhf-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral3
Sample
wr.php.sh
Resource
debian9-mipsbe-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral4
Sample
wr.php.sh
Resource
debian9-mipsel-20260513-en
0 signatures
150 seconds
Malware Config
Targets
-
- Target wr.php.sh
- Size 26KB
- SHA256 5b5ffac2a3cbda8adbeb1cf0b854f5dc8324d2d585372e3fdada8548cc7c8823
- MD5 0c8e3425d858df951f0cdf15ffd7b1b5
- SHA1 14066b6e7ed7c9387cd7c676297f8cfe5ffba298
- SHA512 eafd8b3e02831cb70164b113971602438b0ee94f7ccff15e07833f0c645fa6f432a013f119ec2d29cb99862ca046f45de4f35f1bc7d4ed8d6d7ff867eb7bf244
- SSDEEP 768:k8vCB+25j6es8RF9FYpMSUpi+20qUpi+20YQX:k8l25Jjd2QX
- TLSH T162C28D966A867C44BEC98A3E4CBD2B1D6DF4C3D1324942AC3D8A3C719C11F9CC618B1A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
File and Directory Permissions Modification
Adversaries may modify file or directory permissions to evade defenses.