General
- Target wr.php.sh
- Size 26KB
- Sample260824-j19bqsce58
- SHA256 f4da5e15023114e0dd0dede7df30877784beae270bceadfb795351b39fdce367
- MD5 6dee6f865da91d18daa9d7803a39bc45
- SHA1 ceb5b748c17d8d24494f53b14f59e6c9a2efdd3d
- SHA512 8cdd6a0b934388867479fe54d5580b22d901894e122bfe3174ced7149445f601a2041e988e48ee7ef71872b1a0a48f8cfef72d697a1d8eb7afcfc7fefce9dbde
- SSDEEP 768:DHL8vCB+25j6es8Ro9FYpMSUpi+20qUpi+20YQX:DHL8l25J+d2QX
- TLSH T109C28D966A957C44BEC98B3E4CBD2B1D6DF4C3D1324942AC3D8A3C719C11FACC618B1A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
Behavioral task
behavioral1
Sample
wr.php.sh
Resource
ubuntu1804-amd64-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
wr.php.sh
Resource
debian9-armhf-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral3
Sample
wr.php.sh
Resource
debian9-mipsbe-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral4
Sample
wr.php.sh
Resource
debian9-mipsel-20260513-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target wr.php.sh
- Size 26KB
- SHA256 f4da5e15023114e0dd0dede7df30877784beae270bceadfb795351b39fdce367
- MD5 6dee6f865da91d18daa9d7803a39bc45
- SHA1 ceb5b748c17d8d24494f53b14f59e6c9a2efdd3d
- SHA512 8cdd6a0b934388867479fe54d5580b22d901894e122bfe3174ced7149445f601a2041e988e48ee7ef71872b1a0a48f8cfef72d697a1d8eb7afcfc7fefce9dbde
- SSDEEP 768:DHL8vCB+25j6es8Ro9FYpMSUpi+20qUpi+20YQX:DHL8l25J+d2QX
- TLSH T109C28D966A957C44BEC98B3E4CBD2B1D6DF4C3D1324942AC3D8A3C719C11FACC618B1A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
File and Directory Permissions Modification
Adversaries may modify file or directory permissions to evade defenses.