General
- Target wr.php.sh
- Size 26KB
- Sample260814-y1ybsshj3x
- SHA256 ce264702b5d9fa27e53da389d15be01cd0efb83713da99824a714a61f71df43a
- MD5 31d5963cbb53faf3bf65cb1294808bdb
- SHA1 7138b0d0f3eede7e500b5ebf242412560f43c8e7
- SHA512 6780089dfe509a89f3a1db67a878e34cb8d6a7f9856950d3e8a8b2fe8d13f44e4fab690b660d7136ae236a86d0a0a744e184bf39ee8786b3bc38c35536ad9cdc
- SSDEEP 768:i8vCB+25j6es8R79FYpMSUpi+20qUpi+20YQX:i8l25JNd2QX
- TLSH T1E7C27D956A867C44BEC98A3E4CBE2B0D6DF5C3D1324942AC3D8B3C719C11F9CD618B1A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
Behavioral task
behavioral1
Sample
wr.php.sh
Resource
ubuntu1804-amd64-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
wr.php.sh
Resource
debian9-armhf-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral3
Sample
wr.php.sh
Resource
debian9-mipsbe-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral4
Sample
wr.php.sh
Resource
debian9-mipsel-20260513-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target wr.php.sh
- Size 26KB
- SHA256 ce264702b5d9fa27e53da389d15be01cd0efb83713da99824a714a61f71df43a
- MD5 31d5963cbb53faf3bf65cb1294808bdb
- SHA1 7138b0d0f3eede7e500b5ebf242412560f43c8e7
- SHA512 6780089dfe509a89f3a1db67a878e34cb8d6a7f9856950d3e8a8b2fe8d13f44e4fab690b660d7136ae236a86d0a0a744e184bf39ee8786b3bc38c35536ad9cdc
- SSDEEP 768:i8vCB+25j6es8R79FYpMSUpi+20qUpi+20YQX:i8l25JNd2QX
- TLSH T1E7C27D956A867C44BEC98A3E4CBE2B0D6DF5C3D1324942AC3D8B3C719C11F9CD618B1A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
File and Directory Permissions Modification
Adversaries may modify file or directory permissions to evade defenses.