General
- Target WSW0.sh
- Size 263B
- Sample260820-czg3jaycmf
- SHA256 7f0adf5c68e6d09361b3aa37532fc083c7b375e8e1f604af878c5fa41fcbe037
- MD5 bfa6548c3a89398f275da26bed6c603a
- SHA1 cb9057e9cd8fc6a4ccbce0717ba95cf3f9c869cb
- SHA512 be3da57f3311fb127bbdc2e320861b7f364a323d864573ae44209150bd18ad3dcbfd154f177c7be8c2a92dd4b54f0d9a5c2d3319b84f14b11229dc0442a47357
- TLSH T17ED097B6256300B850620968F9C2EC00719A17BF4C47C20EBA4F68706F40388F0E03D4
- MD5 SHA1 SHA512 TLSH
Score
7/10
Static task
static1
Behavioral task
behavioral1
Sample
WSW0.sh
Resource
ubuntu1804-amd64-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
WSW0.sh
Resource
debian9-armhf-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral3
Sample
WSW0.sh
Resource
debian9-mipsbe-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral4
Sample
WSW0.sh
Resource
debian9-mipsel-20260513-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target WSW0.sh
- Size 263B
- SHA256 7f0adf5c68e6d09361b3aa37532fc083c7b375e8e1f604af878c5fa41fcbe037
- MD5 bfa6548c3a89398f275da26bed6c603a
- SHA1 cb9057e9cd8fc6a4ccbce0717ba95cf3f9c869cb
- SHA512 be3da57f3311fb127bbdc2e320861b7f364a323d864573ae44209150bd18ad3dcbfd154f177c7be8c2a92dd4b54f0d9a5c2d3319b84f14b11229dc0442a47357
- TLSH T17ED097B6256300B850620968F9C2EC00719A17BF4C47C20EBA4F68706F40388F0E03D4
- MD5 SHA1 SHA512 TLSH
Score7/10-
File and Directory Permissions Modification
Adversaries may modify file or directory permissions to evade defenses.
-
Executes dropped EXE
-
OS Credential Dumping
Adversaries may attempt to dump credentials to use it in password cracking.