General
- Target wr.php.sh
- Size 26KB
- Sample260813-jf1tvstsfs
- SHA256 dfee91531f55eba424a16613b5ce7b83b597bfc7de7b76fd9ea421bc6729c843
- MD5 b043109c088889575da993eecfbd7e88
- SHA1 9d1c21dc0ab633268423433297b09eb55bfcd881
- SHA512 d2257aa95c79b055f2b9ad6566bba2245e498aed18acdd11300130a9f8cc75a6f99ead818ae411e938c61b6cf767f2784ad8c54ca5e458447e6edc69435e3c71
- SSDEEP 768:N8vCB+25j6es8Rz9FYpMSUpi+20qUpi+20YQX:N8l25J1d2QX
- TLSH T1AAC27D966A867C44BDC98A3E4CBD2B1D6DF5C3D1324942AC3D8B3C719C11FACD618B1A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
Behavioral task
behavioral1
Sample
wr.php.sh
Resource
ubuntu1804-amd64-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
wr.php.sh
Resource
debian9-armhf-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral3
Sample
wr.php.sh
Resource
debian9-mipsbe-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral4
Sample
wr.php.sh
Resource
debian9-mipsel-20260513-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target wr.php.sh
- Size 26KB
- SHA256 dfee91531f55eba424a16613b5ce7b83b597bfc7de7b76fd9ea421bc6729c843
- MD5 b043109c088889575da993eecfbd7e88
- SHA1 9d1c21dc0ab633268423433297b09eb55bfcd881
- SHA512 d2257aa95c79b055f2b9ad6566bba2245e498aed18acdd11300130a9f8cc75a6f99ead818ae411e938c61b6cf767f2784ad8c54ca5e458447e6edc69435e3c71
- SSDEEP 768:N8vCB+25j6es8Rz9FYpMSUpi+20qUpi+20YQX:N8l25J1d2QX
- TLSH T1AAC27D966A867C44BDC98A3E4CBD2B1D6DF5C3D1324942AC3D8B3C719C11FACD618B1A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
File and Directory Permissions Modification
Adversaries may modify file or directory permissions to evade defenses.