General
- Target wr.php.sh
- Size 26KB
- Sample260826-n75pcadk41
- SHA256 0b31d749981c1570c606a53f237d4383a1811f19c5785d1e4cef156db75caad4
- MD5 5a41fe860695e74dc8d578110be0d623
- SHA1 abd67c98a5d1230e5f43b09e85f0d6a8e13d380c
- SHA512 8c32583531854c129be38a894b9e4c6a1d167ee9a6f9e6a9fa94d4f5d7a126ab143d398944169025a7e84319a6a38200c0d38155a573a05613f569af971838f6
- SSDEEP 768:+8vCB+25j6es8Rn99FYpMSUpi+20qUpi+20YQX:+8l25Jrd2QX
- TLSH T1D8C27C966A867C44BEC98A3E4CBD2B0D6DF5C3D1224D42AC3D4B3C719C11FACD618B1A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
Behavioral task
behavioral1
Sample
wr.php.sh
Resource
ubuntu1804-amd64-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
wr.php.sh
Resource
debian9-armhf-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral3
Sample
wr.php.sh
Resource
debian9-mipsbe-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral4
Sample
wr.php.sh
Resource
debian9-mipsel-20260513-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target wr.php.sh
- Size 26KB
- SHA256 0b31d749981c1570c606a53f237d4383a1811f19c5785d1e4cef156db75caad4
- MD5 5a41fe860695e74dc8d578110be0d623
- SHA1 abd67c98a5d1230e5f43b09e85f0d6a8e13d380c
- SHA512 8c32583531854c129be38a894b9e4c6a1d167ee9a6f9e6a9fa94d4f5d7a126ab143d398944169025a7e84319a6a38200c0d38155a573a05613f569af971838f6
- SSDEEP 768:+8vCB+25j6es8Rn99FYpMSUpi+20qUpi+20YQX:+8l25Jrd2QX
- TLSH T1D8C27C966A867C44BEC98A3E4CBD2B0D6DF5C3D1224D42AC3D4B3C719C11FACD618B1A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
File and Directory Permissions Modification
Adversaries may modify file or directory permissions to evade defenses.