General
- Target wr.php.sh
- Size 26KB
- Sample260903-mg9pyavcqe
- SHA256 9a72bc24787fa0a0c6fd6cb8cfb75b27c73f0043a95c15a6b6e37fabf330ddbe
- MD5 4ef53158cbb10b26b342d04bf093a1c2
- SHA1 1484c09add8e0d9804996653f9f3bf47457230c1
- SHA512 621868c7c462b485bb4e221033cfa50d87023004d2c68c697b754d68770823d71092dc29620b4815f195b18d9d26e4edb5cd37f5c65f3fbc4c2bb8334f7f5857
- SSDEEP 768:P8vCB+25j6es8RF9FYpMSUpi+20qUpi+20YQX:P8l25Jjd2QX
- TLSH T119C27D966A867C44BDC94A3E4CBD2B1D6DF5C3D1324942AC3D8B3C719C15F9CC618B1A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
Behavioral task
behavioral1
Sample
wr.php.sh
Resource
ubuntu1804-amd64-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
wr.php.sh
Resource
debian9-armhf-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral3
Sample
wr.php.sh
Resource
debian9-mipsbe-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral4
Sample
wr.php.sh
Resource
debian9-mipsel-20260513-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target wr.php.sh
- Size 26KB
- SHA256 9a72bc24787fa0a0c6fd6cb8cfb75b27c73f0043a95c15a6b6e37fabf330ddbe
- MD5 4ef53158cbb10b26b342d04bf093a1c2
- SHA1 1484c09add8e0d9804996653f9f3bf47457230c1
- SHA512 621868c7c462b485bb4e221033cfa50d87023004d2c68c697b754d68770823d71092dc29620b4815f195b18d9d26e4edb5cd37f5c65f3fbc4c2bb8334f7f5857
- SSDEEP 768:P8vCB+25j6es8RF9FYpMSUpi+20qUpi+20YQX:P8l25Jjd2QX
- TLSH T119C27D966A867C44BDC94A3E4CBD2B1D6DF5C3D1324942AC3D8B3C719C15F9CC618B1A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
File and Directory Permissions Modification
Adversaries may modify file or directory permissions to evade defenses.