General
- Target run.sh
- Size 35.3MB
- Sample260828-2a8avsen2y
- SHA256 7e91f5c5e35202a30960a51a378d14939c23f2255977d7a217a9bce2173847b2
- MD5 9ba2532687f1ad9b161be871de0c2689
- SHA1 36c9cc4b050fcd5e5cd4a4b08f7d858b7b8adb21
- SHA512 ed9725f82d340d2c012ded7c55188075808639b923ce85019b3df8d0c012859f934d4f7477c1064020d2e4c10e0b1fbbc69f912915a111b4979b3dfa6ba52621
- SSDEEP 786432:VtpZycvGiPCwK155KAD/Oo4dBqtdesTtmHvBMrdormJuNYnX4JFwpoAoi03:3pZycv7PCwK1PD2okq+HXPNYX4Jmqj
- TLSH T1E5873300F1FA6589F93FDD9A17B9B709B3B2827D0E02450792FB26B570C7845A893B74
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
Behavioral task
behavioral1
Sample
bun
Resource
ubuntu1804-amd64-20260513-en
3 signatures
400 seconds
Behavioral task
behavioral2
Sample
run.sh
Resource
ubuntu1804-amd64-20260513-en
6 signatures
400 seconds
Behavioral task
behavioral3
Sample
run.sh
Resource
debian9-armhf-20260513-en
3 signatures
400 seconds
Behavioral task
behavioral4
Sample
run.sh
Resource
debian9-mipsbe-20260513-en
3 signatures
400 seconds
Behavioral task
behavioral5
Sample
run.sh
Resource
debian9-mipsel-20260513-en
3 signatures
400 seconds
Behavioral task
behavioral6
Sample
worm.js
Resource
win10v2004-20260513-en
1 signatures
400 seconds
Behavioral task
behavioral7
Sample
worm.js
Resource
win11ltsc2024-20260709-en
1 signatures
400 seconds
Malware Config
Targets
-
- Target bun
- Size 77.0MB
- SHA256 33d56b070be6a9e3da0ab013038b43d1645d0534ca811ecdba4472599117eb4b
- MD5 8e6d5c8d09fa14ca4bf4a101739a7220
- SHA1 11066c88428eeebeddcce7bffafad27c2021da85
- SHA512 a379f84b2395962b06563a54dd231818ea8e3c077458eb0ad4d8d394057329af4f8998a88c58cf3ee8f95462323f6704b73552c6d9ff74001d925db63a478af0
- SSDEEP 786432:RwVdGZJ8rsSNM5v6U1Pyw5KgwdgHVK0UL04HxUoF6+G10R:sjsS6PywYgy0wxUoFtGO
- TLSH T1B7088E26B1A2A498D457C07027DB8762A732F87A172465DB32D8AF323F37CD15379722
- MD5 SHA1 SHA512 SSDEEP TLSH
Score4/10 -
- Target run.sh
- Size 2KB
- SHA256 82770a8a758e48c04f3ff8b66d3693570c29d7968568594a90a5d05147997f25
- MD5 a6e6b239bc02c814c757830e0e687414
- SHA1 12c88dff0cae1a4fd5d654a6c3fba87ffc02b86c
- SHA512 fea88033b99be18db572c04c8e650105ba08697dc6b6d16706509f8879826752fe8dea6cb6c3b060dffa8fce5da4950a087fbd8110c140d31fb07d35618b34a8
- TLSH T10D51E9F77A2575301AB043B6FE69C0444BE174A57DF0B050C11253B8DAAC5DD82BA339
- MD5 SHA1 SHA512 TLSH
Score7/10-
File and Directory Permissions Modification
Adversaries may modify file or directory permissions to evade defenses.
-
- Target worm.js
- Size 777KB
- SHA256 1c4e9f996773e6d204dd7c39ab02deaed20aa27fc8060f2ef913f74315e397d8
- MD5 1d3b239c549ca3f49fc2d2559361eccb
- SHA1 29a65ad34d1007e9ffd83940de77e10cb3d9023d
- SHA512 4d9268165483a16a9fbe4585909842f198201f6f0c1c006ac21f921e4bf2e5d4cb7ca7d27b41d026780b420a5191a4439fe8400f2cd0b4514098f73dcb17f050
- SSDEEP 24576:V5RTJCApepwqtdd/3rs6lfRyhu6CRN8ahHPRTHLnXntGiUFu3:V5RTJCRpwqtnrDohu6CR/hHRnXn003
- TLSH T1BB05D81023D57855234B9FBF731AF0F6E91E19AE744C0C8FE114BC1266A962FEAE5930
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10
MITRE ATT&CK Enterprise v16
Tasks
static1
Score
1/10
behavioral1
discovery
Score
4/10
behavioral2
defense_evasiondiscovery
Score
7/10
behavioral3
defense_evasiondiscovery
Score
7/10
behavioral4
defense_evasiondiscovery
Score
7/10
behavioral5
defense_evasiondiscovery
Score
7/10
behavioral6
execution
Score
3/10
behavioral7
execution
Score
3/10