Resubmissions

10/09/2026, 02:25

260910-cwkz1swwas3

10/09/2026, 02:25

260910-cwkn9acr2y

10/09/2026, 02:25

260910-cwkn9acr2x

10/09/2026, 02:18

260910-crf59swtfv3

Analysis

  • max time kernel
    0s
  • platform
    debian-9_armhf
  • resource
    debian9-armhf-20260513-en
  • resource tags

    arch:armhfimage:debian9-armhf-20260513-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem
  • submitted
    10/09/2026, 02:18

General

  • Target
    install.sh
  • Size 19KB
  • Sample260910-crf59swtfv
  • SHA256 5574b96e94dbcb769f0d1592fa83aeb6ca2caf41c6ae5d76fcc7f04c524b4f55
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10

Malware Config

Signatures

  • Reads runtime system information 1 IoCs

    Reads data from /proc virtual filesystem.

Processes

  • /tmp/install.sh
    /tmp/install.sh
    1⤵
      PID:653
      • /usr/bin/id
        id -u -n
        2⤵
        • Reads runtime system information
        PID:655
      • /usr/bin/cut
        cut -d: -f6
        2⤵
          PID:661
        • /usr/bin/getent
          getent passwd root
          2⤵
            PID:660

        Network

              MITRE ATT&CK Matrix

              Replay Monitor

              Loading Replay Monitor...

              Downloads