General
- Target wr.php.sh
- Size 26KB
- Sample260827-1gj16sbb45
- SHA256 dc29a4949df1d09d7ba61331711cb8beb7867a727bdb269d89681000c054d136
- MD5 a6f3da1b68c297330ee43f20d5c50638
- SHA1 4351f1e1f214e4f4c8d672d802cffb4fddb1cec9
- SHA512 5ca49821367519122d21a5180df9aee3bce865d31bed0c398890292e4088174bc4c68c68947e01ec9fb7ef4598d2856dac63c690a92a4a030e08518e108aca7f
- SSDEEP 768:M8vCB+25j6es8RB9FYpMSUpi+20qUpi+20YQX:M8l25J3d2QX
- TLSH T141C28D956A867C44BDC94A3E4CBD2B0D6DF4C3D1324942AC3D8B3C719C15F9CD618B1A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
Behavioral task
behavioral1
Sample
wr.php.sh
Resource
ubuntu1804-amd64-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
wr.php.sh
Resource
debian9-armhf-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral3
Sample
wr.php.sh
Resource
debian9-mipsbe-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral4
Sample
wr.php.sh
Resource
debian9-mipsel-20260513-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target wr.php.sh
- Size 26KB
- SHA256 dc29a4949df1d09d7ba61331711cb8beb7867a727bdb269d89681000c054d136
- MD5 a6f3da1b68c297330ee43f20d5c50638
- SHA1 4351f1e1f214e4f4c8d672d802cffb4fddb1cec9
- SHA512 5ca49821367519122d21a5180df9aee3bce865d31bed0c398890292e4088174bc4c68c68947e01ec9fb7ef4598d2856dac63c690a92a4a030e08518e108aca7f
- SSDEEP 768:M8vCB+25j6es8RB9FYpMSUpi+20qUpi+20YQX:M8l25J3d2QX
- TLSH T141C28D956A867C44BDC94A3E4CBD2B0D6DF4C3D1324942AC3D8B3C719C15F9CD618B1A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
File and Directory Permissions Modification
Adversaries may modify file or directory permissions to evade defenses.