Analysis
- max time kernel
0s - platform
debian-9_armhf - resource
debian9-armhf-20260513-en - resource tags
arch:armhfimage:debian9-armhf-20260513-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem - submitted
20/08/2026, 06:14
Static task
static1
Behavioral task
behavioral1
Sample
4b607154782f4d77b2d602904fbfd108d152f1f2b4795306b6236da8114503c8
Resource
ubuntu1804-amd64-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
4b607154782f4d77b2d602904fbfd108d152f1f2b4795306b6236da8114503c8
Resource
debian9-armhf-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral3
Sample
4b607154782f4d77b2d602904fbfd108d152f1f2b4795306b6236da8114503c8
Resource
debian9-mipsbe-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral4
Sample
4b607154782f4d77b2d602904fbfd108d152f1f2b4795306b6236da8114503c8
Resource
debian9-mipsel-20260513-en
0 signatures
150 seconds
General
- Target 4b607154782f4d77b2d602904fbfd108d152f1f2b4795306b6236da8114503c8
- Size 270KB
- Sample260820-gzmega1cka
- SHA256 4b607154782f4d77b2d602904fbfd108d152f1f2b4795306b6236da8114503c8
- MD5 9f0f48d06674c01a0193844be245a63c
- SHA1 256ad3e08a61bc9766745f7ef621be0cff0a7990
- SHA512 756c119eb039d273f061973cb55932e133083a451d498d1386b52e040b699e52d771cd5c9cec0030f5835049611eea1427113e360cf5af10ba47fb897af426f8
- SSDEEP 3072:G6omEpvBlEll2SSIFFmEi8Q+uNdgNewqJ+OvC:G6IhEll2eFFmEi8Q+uNdyewqJQ
- TLSH T1B344B406B8400FB519BD80BD7DC2B42A231DA14746642C50B9DDB98CBFB4A72E1F5B9F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
Processes
-
/tmp/4b607154782f4d77b2d602904fbfd108d152f1f2b4795306b6236da8114503c8/tmp/4b607154782f4d77b2d602904fbfd108d152f1f2b4795306b6236da8114503c81⤵PID:652
-
/usr/local/sbin/shsh /tmp/4b607154782f4d77b2d602904fbfd108d152f1f2b4795306b6236da8114503c81⤵PID:652
-
/usr/local/bin/shsh /tmp/4b607154782f4d77b2d602904fbfd108d152f1f2b4795306b6236da8114503c81⤵PID:652
-
/usr/sbin/shsh /tmp/4b607154782f4d77b2d602904fbfd108d152f1f2b4795306b6236da8114503c81⤵PID:652
-
/usr/bin/shsh /tmp/4b607154782f4d77b2d602904fbfd108d152f1f2b4795306b6236da8114503c81⤵PID:652
-
/sbin/shsh /tmp/4b607154782f4d77b2d602904fbfd108d152f1f2b4795306b6236da8114503c81⤵PID:652
-
/bin/shsh /tmp/4b607154782f4d77b2d602904fbfd108d152f1f2b4795306b6236da8114503c81⤵PID:652
-
/usr/bin/trtr a-z A-Z2⤵PID:658
-
-
/bin/egrepegrep -o b2⤵PID:664
-
-
/usr/local/sbin/grepgrep -E -o b2⤵PID:664
-
-
/usr/local/bin/grepgrep -E -o b2⤵PID:664
-
-
/usr/sbin/grepgrep -E -o b2⤵PID:664
-
-
/usr/bin/grepgrep -E -o b2⤵PID:664
-
-
/sbin/grepgrep -E -o b2⤵PID:664
-
-
/bin/grepgrep -E -o b2⤵PID:664
-
-
/bin/readlinkreadlink -f /tmp/4b607154782f4d77b2d602904fbfd108d152f1f2b4795306b6236da8114503c82⤵PID:680
-
-
/usr/bin/dirnamedirname /tmp/4b607154782f4d77b2d602904fbfd108d152f1f2b4795306b6236da8114503c82⤵PID:681
-
-
/usr/bin/trtr -s /2⤵PID:687
-
-
/usr/bin/cutcut -d : -f 22⤵PID:686
-
-
/usr/bin/cutcut -d / -f 22⤵PID:688
-
-
/usr/bin/cutcut -d : -f 2-2⤵PID:692
-
-
/usr/bin/cutcut -d / -f 3-2⤵PID:694
-
-
/usr/bin/trtr -s /2⤵PID:693
-