Analysis
- max time kernel
0s - max time network
129s - platform
ubuntu-18.04_amd64 - resource
ubuntu1804-amd64-20260513-en - resource tags
arch:amd64arch:i386image:ubuntu1804-amd64-20260513-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system - submitted
03/09/2026, 18:20
Static task
static1
Behavioral task
behavioral1
Sample
dsh
Resource
ubuntu1804-amd64-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
dsh
Resource
debian9-armhf-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral3
Sample
dsh
Resource
debian9-mipsbe-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral4
Sample
dsh
Resource
debian9-mipsel-20260513-en
0 signatures
150 seconds
General
- Target dsh
- Size 7KB
- Sample260903-wy4ppaah55
- SHA256 dc23f6c5dd7df8834e3e38bdb9609d77b459834681ae9b7133b417b0c35f3166
- MD5 7bec387ea6c2a7c304bbe6ae795a9b1c
- SHA1 5f90154cd0b48d31f51a3c8e6878da64afd54c83
- SHA512 fab98a58ec074dceab50772d139b453f54ba83d1e0de39019862736893821077b5f63bfa1b1aa63ecd71e2b82797fb09a7875aa46e21269330a55d094fe5236f
- SSDEEP 192:fqdpXuKGsH77wwfVZQSdeGPnBHwfHQfDvccKj:fqdpXJ7QGZGN
- TLSH T14EF19253DADC13B306F63E88B58E12C2A37F87793265A820741DB69C630356947E7AC2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Enumerates kernel/hardware configuration 1 TTPs 1 IoCs
Reads contents of /sys virtual filesystem to enumerate system information.
description ioc Process File opened for reading /sys/fs/cgroup/memory/memory.limit_in_bytes node -
description ioc Process File opened for reading /proc/meminfo node
Processes
-
/tmp/dsh/tmp/dsh1⤵PID:1501
-
/usr/local/sbin/nodenode /tmp/dsh1⤵PID:1501
-
/usr/local/bin/nodenode /tmp/dsh1⤵PID:1501
-
/usr/sbin/nodenode /tmp/dsh1⤵PID:1501
-
/usr/bin/nodenode /tmp/dsh1⤵
- Enumerates kernel/hardware configuration
- Reads runtime system information
PID:1501