General
- Target wget.sh
- Size 2KB
- Sample260822-cjgrtszfqf
- SHA256 5c4e263546fb21f8fe8732789a5b6583eaa8ae11ebeef099462a7c9bf50e022d
- MD5 123fdb418381ba3f48ee6a148102cdf9
- SHA1 2ae68307f85f71d4a295da575852bd0788ae9510
- SHA512 7acdbe62c829c94d834c6980cc403153b59eae60dc725e1a29aeac7bbdcb986afb2b2660618a1210c77b733ad1f94b0f5e134998f9cef574f594edd16f8dee1d
- TLSH T17151ECDE30F06E61C2819E1C327F9E987015CDEA36815BF8948B6836D99EDB0B536E44
- MD5 SHA1 SHA512 TLSH
Static task
static1
Behavioral task
behavioral1
Sample
wget.sh
Resource
ubuntu1804-amd64-20260513-en
Behavioral task
behavioral2
Sample
wget.sh
Resource
debian9-armhf-20260513-en
Behavioral task
behavioral3
Sample
wget.sh
Resource
debian9-mipsbe-20260513-en
Behavioral task
behavioral4
Sample
wget.sh
Resource
debian9-mipsel-20260513-en
Malware Config
Targets
-
- Target wget.sh
- Size 2KB
- SHA256 5c4e263546fb21f8fe8732789a5b6583eaa8ae11ebeef099462a7c9bf50e022d
- MD5 123fdb418381ba3f48ee6a148102cdf9
- SHA1 2ae68307f85f71d4a295da575852bd0788ae9510
- SHA512 7acdbe62c829c94d834c6980cc403153b59eae60dc725e1a29aeac7bbdcb986afb2b2660618a1210c77b733ad1f94b0f5e134998f9cef574f594edd16f8dee1d
- TLSH T17151ECDE30F06E61C2819E1C327F9E987015CDEA36815BF8948B6836D99EDB0B536E44
- MD5 SHA1 SHA512 TLSH
Score7/10-
File and Directory Permissions Modification
Adversaries may modify file or directory permissions to evade defenses.
-
Executes dropped EXE
-
Modifies Watchdog functionality
Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.
-
Enumerates running processes
Discovers information about currently running processes on the system
-
Write file to user bin folder
MITRE ATT&CK Enterprise v16
Defense Evasion
File and Directory Permissions Modification
1Linux and Mac File and Directory Permissions Modification
1Impair Defenses
1Virtualization/Sandbox Evasion
1System Checks
1