General
- Target wr.php.sh
- Size 26KB
- Sample260817-rhblrasyhs
- SHA256 f0cc2f4f5fc888962a19f4ee32d31404969749a35d8ec963b5a68db99993a4d0
- MD5 261007d0a10140ec6c5ebd6fdf084076
- SHA1 690a74cbb4f4a3d7314c26938316f150c49ad362
- SHA512 89f6767bdb89e8280cb9312e26491c2b4eae8bdeb55c7ee557a0cfd6f54684ddb85285133616593990179efb63f8891cee250863f57111154155b27c9d84721e
- SSDEEP 768:+8vCB+25j6es8RO9FYpMSUpi+20qUpi+20YQX:+8l25Jod2QX
- TLSH T170C27D956A867C44BEC98B3E4CBD2B1D6DF5C3D1324942AC3D8A3C719C11FACD618B1A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
Behavioral task
behavioral1
Sample
wr.php.sh
Resource
ubuntu1804-amd64-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
wr.php.sh
Resource
debian9-armhf-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral3
Sample
wr.php.sh
Resource
debian9-mipsbe-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral4
Sample
wr.php.sh
Resource
debian9-mipsel-20260513-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target wr.php.sh
- Size 26KB
- SHA256 f0cc2f4f5fc888962a19f4ee32d31404969749a35d8ec963b5a68db99993a4d0
- MD5 261007d0a10140ec6c5ebd6fdf084076
- SHA1 690a74cbb4f4a3d7314c26938316f150c49ad362
- SHA512 89f6767bdb89e8280cb9312e26491c2b4eae8bdeb55c7ee557a0cfd6f54684ddb85285133616593990179efb63f8891cee250863f57111154155b27c9d84721e
- SSDEEP 768:+8vCB+25j6es8RO9FYpMSUpi+20qUpi+20YQX:+8l25Jod2QX
- TLSH T170C27D956A867C44BEC98B3E4CBD2B1D6DF5C3D1324942AC3D8A3C719C11FACD618B1A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10File and Directory Permissions Modification
Adversaries may modify file or directory permissions to evade defenses.