General
- Target cat.sh
- Size 1KB
- Sample260907-lrv4vsgk9v
- SHA256 4de34e22fec36167a9fabbe29b8eb38482ad5d16e59bce2fdd735b7ac15a0a86
- MD5 351665a61b01812991c5c3c2cc0159f7
- SHA1 188d0325d5c80d2a9112ea2a38a4226c1a39e736
- SHA512 ac8b68d857af420f796642efb9f621f9a7843def3cb5643be74173ec0ee2ddce2039fc2ff0b6c62ca3e8d699f4e8c3a90bc8d84b3d46818a1b14c3304ffba91f
- TLSH T18931538931706E32C1DEEF09B0E1C6E49247F5C5BA930BF2E8421DA9A8D9E48B415B35
- MD5 SHA1 SHA512 TLSH
Static task
static1
Behavioral task
behavioral1
Sample
cat.sh
Resource
ubuntu1804-amd64-20260513-en
Behavioral task
behavioral2
Sample
cat.sh
Resource
debian9-armhf-20260513-en
Behavioral task
behavioral3
Sample
cat.sh
Resource
debian9-mipsbe-20260513-en
Behavioral task
behavioral4
Sample
cat.sh
Resource
debian9-mipsel-20260513-en
Malware Config
Targets
-
- Target cat.sh
- Size 1KB
- SHA256 4de34e22fec36167a9fabbe29b8eb38482ad5d16e59bce2fdd735b7ac15a0a86
- MD5 351665a61b01812991c5c3c2cc0159f7
- SHA1 188d0325d5c80d2a9112ea2a38a4226c1a39e736
- SHA512 ac8b68d857af420f796642efb9f621f9a7843def3cb5643be74173ec0ee2ddce2039fc2ff0b6c62ca3e8d699f4e8c3a90bc8d84b3d46818a1b14c3304ffba91f
- TLSH T18931538931706E32C1DEEF09B0E1C6E49247F5C5BA930BF2E8421DA9A8D9E48B415B35
- MD5 SHA1 SHA512 TLSH
Score7/10-
File and Directory Permissions Modification
Adversaries may modify file or directory permissions to evade defenses.
-
Executes dropped EXE
-
Enumerates running processes
Discovers information about currently running processes on the system
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Boot or Logon Initialization Scripts
1RC Scripts
1Privilege Escalation
Boot or Logon Autostart Execution
1Boot or Logon Initialization Scripts
1RC Scripts
1Defense Evasion
File and Directory Permissions Modification
1Linux and Mac File and Directory Permissions Modification
1Virtualization/Sandbox Evasion
1System Checks
1