General
- Target wr.php.sh
- Size 26KB
- Sample260823-1b1fzaar81
- SHA256 f3ac481b23ca149c28fe1e34dbeea0941bbeb77dac229f9594c2d97086e08a2d
- MD5 35fb48e153dea1488ae26f9c8d36a764
- SHA1 efa1a43149e1c33c86162fef06cd0c4842085db0
- SHA512 617038b2ca0b4c822f1ee261f79d371a3eb70f5d8c3af3bb54ab23fb209a02c3fc9b2c43028ddf33a318200960e803e9efe3f35c2bec5d53caf99d4e9a4e188d
- SSDEEP 768:k8vCB+25j6es8Rf9FYpMSUpi+20qUpi+20YQX:k8l25Jpd2QX
- TLSH T1ABC28D956A867C44BEC98A3E4CBE2B1D6DF5C3D1224942AC3D8B3C71DC11F9CD618B1A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
Behavioral task
behavioral1
Sample
wr.php.sh
Resource
ubuntu1804-amd64-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
wr.php.sh
Resource
debian9-armhf-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral3
Sample
wr.php.sh
Resource
debian9-mipsbe-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral4
Sample
wr.php.sh
Resource
debian9-mipsel-20260513-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target wr.php.sh
- Size 26KB
- SHA256 f3ac481b23ca149c28fe1e34dbeea0941bbeb77dac229f9594c2d97086e08a2d
- MD5 35fb48e153dea1488ae26f9c8d36a764
- SHA1 efa1a43149e1c33c86162fef06cd0c4842085db0
- SHA512 617038b2ca0b4c822f1ee261f79d371a3eb70f5d8c3af3bb54ab23fb209a02c3fc9b2c43028ddf33a318200960e803e9efe3f35c2bec5d53caf99d4e9a4e188d
- SSDEEP 768:k8vCB+25j6es8Rf9FYpMSUpi+20qUpi+20YQX:k8l25Jpd2QX
- TLSH T1ABC28D956A867C44BEC98A3E4CBE2B1D6DF5C3D1224942AC3D8B3C71DC11F9CD618B1A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
File and Directory Permissions Modification
Adversaries may modify file or directory permissions to evade defenses.