General
- Target wr.php.sh
- Size 26KB
- Sample260910-eqcgssxbmf
- SHA256 b137a0c0df77c685a733ad341d437c0735f8935ead93c17b3d06107a6a25c827
- MD5 9d40d13e35b0bc218402405174953efb
- SHA1 b0d19eb87e10e68b125f84de6c9bf93fdf591b36
- SHA512 e43e7fe80a959490510ecef280a067487fcf5d7ea8e9e6d1942f888740965f4e7b6b8da05795bcfeb8729e640d2a0a99f76395dd6106e91c49bb14c711451ba8
- SSDEEP 768:58vCB+25j6es8RJ9FYpMSUpi+20qUpi+20YQX:58l25Jvd2QX
- TLSH T1ECC27D966A867C44BDC94A3E4CBD2B1D6DF5C3D1324942AC3D8B3C719C12F9CD618B1A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
Behavioral task
behavioral1
Sample
wr.php.sh
Resource
ubuntu1804-amd64-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
wr.php.sh
Resource
debian9-armhf-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral3
Sample
wr.php.sh
Resource
debian9-mipsbe-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral4
Sample
wr.php.sh
Resource
debian9-mipsel-20260513-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target wr.php.sh
- Size 26KB
- SHA256 b137a0c0df77c685a733ad341d437c0735f8935ead93c17b3d06107a6a25c827
- MD5 9d40d13e35b0bc218402405174953efb
- SHA1 b0d19eb87e10e68b125f84de6c9bf93fdf591b36
- SHA512 e43e7fe80a959490510ecef280a067487fcf5d7ea8e9e6d1942f888740965f4e7b6b8da05795bcfeb8729e640d2a0a99f76395dd6106e91c49bb14c711451ba8
- SSDEEP 768:58vCB+25j6es8RJ9FYpMSUpi+20qUpi+20YQX:58l25Jvd2QX
- TLSH T1ECC27D966A867C44BDC94A3E4CBD2B1D6DF5C3D1324942AC3D8B3C719C12F9CD618B1A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
File and Directory Permissions Modification
Adversaries may modify file or directory permissions to evade defenses.