General
- Target wr.php.sh
- Size 26KB
- Sample260816-rm37kacp9s
- SHA256 fefca4c24d96c67cf13f8dce76d148c4626b72138293dd899b949aca43d8615a
- MD5 434f83ab286ca7e5abe7562bd966e4a2
- SHA1 e003f5b074c7d3b1507dffce139515d285535d07
- SHA512 9bad3657a501c0c9481a8ed274f56f339d2eb354fe56035321c426ce46d257b648f48c9b6922d67ca9567c16a97cee9ec9332c670f33a095130994ae00ad1176
- SSDEEP 768:A8vCB+25j6es8Rb9FYpMSUpi+20qUpi+20YQX:A8l25Jtd2QX
- TLSH T17CC28E966A867C44BDC98A3E4CBD2B1D6DF5C3D1224942AC3D8B3C71DC11FACD618B1A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
Behavioral task
behavioral1
Sample
wr.php.sh
Resource
ubuntu1804-amd64-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
wr.php.sh
Resource
debian9-armhf-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral3
Sample
wr.php.sh
Resource
debian9-mipsbe-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral4
Sample
wr.php.sh
Resource
debian9-mipsel-20260513-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target wr.php.sh
- Size 26KB
- SHA256 fefca4c24d96c67cf13f8dce76d148c4626b72138293dd899b949aca43d8615a
- MD5 434f83ab286ca7e5abe7562bd966e4a2
- SHA1 e003f5b074c7d3b1507dffce139515d285535d07
- SHA512 9bad3657a501c0c9481a8ed274f56f339d2eb354fe56035321c426ce46d257b648f48c9b6922d67ca9567c16a97cee9ec9332c670f33a095130994ae00ad1176
- SSDEEP 768:A8vCB+25j6es8Rb9FYpMSUpi+20qUpi+20YQX:A8l25Jtd2QX
- TLSH T17CC28E966A867C44BDC98A3E4CBD2B1D6DF5C3D1224942AC3D8B3C71DC11FACD618B1A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
File and Directory Permissions Modification
Adversaries may modify file or directory permissions to evade defenses.