General
- Target telnet.sh
- Size 1KB
- Sample260818-sl7n2adj2z
- SHA256 58af3efe757e3952eddc58f1ecde0ef00a00ba7ddc656826fc31872ea7cfa71e
- MD5 4ba79ef0833c5b390f5a7b29f3bee399
- SHA1 9ccb519c3e04b13f831e400a65dc27fbc7380e3e
- SHA512 4420b19dc491467e6561049e21d8229b12a66828dbb7cc83f491263d7a9ea3f9b92944975ce4833e06b1ac86b0be6968a9000831f287ee0f2b8bf1948297c146
- TLSH T19A3121CD32F8B293CB5DCF41BCE142C6B247D58662D8AE72E8C11CA16969FC13475A36
- MD5 SHA1 SHA512 TLSH
Static task
static1
Behavioral task
behavioral1
Sample
telnet.sh
Resource
ubuntu1804-amd64-20260513-en
Behavioral task
behavioral2
Sample
telnet.sh
Resource
debian9-armhf-20260513-en
Behavioral task
behavioral3
Sample
telnet.sh
Resource
debian9-mipsbe-20260513-en
Behavioral task
behavioral4
Sample
telnet.sh
Resource
debian9-mipsel-20260513-en
Malware Config
Targets
-
- Target telnet.sh
- Size 1KB
- SHA256 58af3efe757e3952eddc58f1ecde0ef00a00ba7ddc656826fc31872ea7cfa71e
- MD5 4ba79ef0833c5b390f5a7b29f3bee399
- SHA1 9ccb519c3e04b13f831e400a65dc27fbc7380e3e
- SHA512 4420b19dc491467e6561049e21d8229b12a66828dbb7cc83f491263d7a9ea3f9b92944975ce4833e06b1ac86b0be6968a9000831f287ee0f2b8bf1948297c146
- TLSH T19A3121CD32F8B293CB5DCF41BCE142C6B247D58662D8AE72E8C11CA16969FC13475A36
- MD5 SHA1 SHA512 TLSH
Score7/10-
File and Directory Permissions Modification
Adversaries may modify file or directory permissions to evade defenses.
-
Executes dropped EXE
-
Enumerates running processes
Discovers information about currently running processes on the system
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Boot or Logon Initialization Scripts
1RC Scripts
1Privilege Escalation
Boot or Logon Autostart Execution
1Boot or Logon Initialization Scripts
1RC Scripts
1Defense Evasion
File and Directory Permissions Modification
1Linux and Mac File and Directory Permissions Modification
1Virtualization/Sandbox Evasion
1System Checks
1