Analysis
- max time kernel
0s - max time network
103s - platform
ubuntu-18.04_amd64 - resource
ubuntu1804-amd64-20260513-en - resource tags
arch:amd64arch:i386image:ubuntu1804-amd64-20260513-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system - submitted
26/08/2026, 18:24
Static task
static1
Behavioral task
behavioral1
Sample
eclipse.sh
Resource
ubuntu1804-amd64-20260513-en
ubuntu-18.04-amd64
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
eclipse.sh
Resource
debian9-armhf-20260513-en
debian-9-armhf
4 signatures
150 seconds
Behavioral task
behavioral3
Sample
eclipse.sh
Resource
debian9-mipsbe-20260513-en
debian-9-mips
4 signatures
150 seconds
Behavioral task
behavioral4
Sample
eclipse.sh
Resource
debian9-mipsel-20260513-en
debian-9-mipsel
4 signatures
150 seconds
General
- Target eclipse.sh
- Size 152B
- Sample260826-w16bashn8x
- SHA256 028ae7cd731ab75bde457778202f625fdcc04c0d3171b7809d98db076553529a
- MD5 4e41f9454380e19ce6599805e244285e
- SHA1 3a35a9bb74aa37d75e24fb84a52068deedfcea29
- SHA512 9faffa5366fb281150121c98fe3c32178ecedd2eea3495f01987b2112678ba8d8e6400657ac2964a7ce5f84aa0af9830563ab0418f8fb483b21045eda653bf1b
- TLSH T107C08CDF0026457CAC45D009BA0904E26080806A2A8A2E2DC9492CBF889910EB06AAA0
- MD5 SHA1 SHA512 TLSH
Score
6/10
Malware Config
Signatures
- Enumerates running processes
Discovers information about currently running processes on the system
- Reads CPU attributes 1 TTPs 1 IoCs
description ioc Process File opened for reading /sys/devices/system/cpu/online pkill -
description ioc Process File opened for reading /proc/172/cmdline pkill File opened for reading /proc/413/status pkill File opened for reading /proc/676/status pkill File opened for reading /proc/1396/status pkill File opened for reading /proc/169/cmdline pkill File opened for reading /proc/698/status pkill File opened for reading /proc/958/status pkill File opened for reading /proc/976/cmdline pkill File opened for reading /proc/1009/status pkill File opened for reading /proc/1058/status pkill File opened for reading /proc/1501/status pkill File opened for reading /proc/1505/status pkill File opened for reading /proc/82/status pkill File opened for reading /proc/173/status pkill File opened for reading /proc/1000/cmdline pkill File opened for reading /proc/1101/status pkill File opened for reading /proc/1188/status pkill File opened for reading /proc/1506/cmdline pkill File opened for reading /proc/164/cmdline pkill File opened for reading /proc/1062/status pkill File opened for reading /proc/81/status pkill File opened for reading /proc/1/cmdline pkill File opened for reading /proc/6/cmdline pkill File opened for reading /proc/18/status pkill File opened for reading /proc/22/cmdline pkill File opened for reading /proc/415/status pkill File opened for reading /proc/419/status pkill File opened for reading /proc/467/cmdline pkill File opened for reading /proc/989/status pkill File opened for reading /proc/158/cmdline pkill File opened for reading /proc/83/cmdline pkill File opened for reading /proc/171/cmdline pkill File opened for reading /proc/269/cmdline pkill File opened for reading /proc/668/status pkill File opened for reading /proc/698/cmdline pkill File opened for reading /proc/976/status pkill File opened for reading /proc/1063/cmdline pkill File opened for reading /proc/2/status pkill File opened for reading /proc/5/cmdline pkill File opened for reading /proc/23/status pkill File opened for reading /proc/510/status pkill File opened for reading /proc/562/cmdline pkill File opened for reading /proc/911/cmdline pkill File opened for reading /proc/1060/status pkill File opened for reading /proc/1066/status pkill File opened for reading /proc/160/status pkill File opened for reading /proc/175/cmdline pkill File opened for reading /proc/533/cmdline pkill File opened for reading /proc/933/status pkill File opened for reading /proc/1087/cmdline pkill File opened for reading /proc/1269/cmdline pkill File opened for reading /proc/14/status pkill File opened for reading /proc/163/cmdline pkill File opened for reading /proc/314/cmdline pkill File opened for reading /proc/512/status pkill File opened for reading /proc/584/cmdline pkill File opened for reading /proc/1396/cmdline pkill File opened for reading /proc/1497/status pkill File opened for reading /proc/163/status pkill File opened for reading /proc/418/cmdline pkill File opened for reading /proc/419/cmdline pkill File opened for reading /proc/1471/cmdline pkill File opened for reading /proc/19/cmdline pkill File opened for reading /proc/1029/status pkill - System Network Configuration Discovery 1 TTPs 1 IoCs
Adversaries may gather information about the network configuration of a system.
pid Process 1505 eclipse.sh