General
- Target all.sh
- Size 2KB
- Sample260904-j84q8aware
- SHA256 a01ff2bc22326ab8d47d2d7119a0051097537ff6f8032ea6d60ee678f52dbdfa
- MD5 7c904c925055359b3ee8599f907aa0d2
- SHA1 b0345110464e6fe52976079645ce085ec3248cb1
- SHA512 cb7640edc22418dc22f6ef4cbc7ce8ddacb4aeef2c857f68b3cbed5ef8ce3319fa933fdef27a580ac8eb35a1a2a9af52c90137afea06405807ed56b8851cec62
- TLSH T1385144F62726673381AF8AE697E2574AA04540537CD80BF0FBEC65103F56FD9BC8A501
- MD5 SHA1 SHA512 TLSH
Score
7/10
Static task
static1
Behavioral task
behavioral1
Sample
all.sh
Resource
ubuntu1804-amd64-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
all.sh
Resource
debian9-armhf-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral3
Sample
all.sh
Resource
debian9-mipsbe-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral4
Sample
all.sh
Resource
debian9-mipsel-20260513-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target all.sh
- Size 2KB
- SHA256 a01ff2bc22326ab8d47d2d7119a0051097537ff6f8032ea6d60ee678f52dbdfa
- MD5 7c904c925055359b3ee8599f907aa0d2
- SHA1 b0345110464e6fe52976079645ce085ec3248cb1
- SHA512 cb7640edc22418dc22f6ef4cbc7ce8ddacb4aeef2c857f68b3cbed5ef8ce3319fa933fdef27a580ac8eb35a1a2a9af52c90137afea06405807ed56b8851cec62
- TLSH T1385144F62726673381AF8AE697E2574AA04540537CD80BF0FBEC65103F56FD9BC8A501
- MD5 SHA1 SHA512 TLSH
Score7/10-
File and Directory Permissions Modification
Adversaries may modify file or directory permissions to evade defenses.
-
Executes dropped EXE
-
Modifies Watchdog functionality
Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.
-
Enumerates running processes
Discovers information about currently running processes on the system
-
Writes file to system bin folder