General
- Target all.sh
- Size 2KB
- Sample260910-tvalbsdr4z
- SHA256 64910261f7c28947f9c8f8afdcece25addec9c02ee62d1dedded066a8d6571f3
- MD5 3ad076810b8065e724d44e53f59cff25
- SHA1 d8bb68d8461a99d99698678be6f52528c0d1dcc1
- SHA512 c4813bb5c2d0f3b952ae60a78fdbfaa6ead682a379e1bd16df2db1a99baa3e22534612b2f3997c140bb01b262a66bf140c24f92bc6686de092874c77b7049bbb
- TLSH T1FF4132F62722677382AF89E697E2574AA04500537CD80BF0FBEC65103F56ED9BC8A501
- MD5 SHA1 SHA512 TLSH
Score
7/10
Static task
static1
Behavioral task
behavioral1
Sample
all.sh
Resource
ubuntu1804-amd64-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
all.sh
Resource
debian9-armhf-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral3
Sample
all.sh
Resource
debian9-mipsbe-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral4
Sample
all.sh
Resource
debian9-mipsel-20260513-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target all.sh
- Size 2KB
- SHA256 64910261f7c28947f9c8f8afdcece25addec9c02ee62d1dedded066a8d6571f3
- MD5 3ad076810b8065e724d44e53f59cff25
- SHA1 d8bb68d8461a99d99698678be6f52528c0d1dcc1
- SHA512 c4813bb5c2d0f3b952ae60a78fdbfaa6ead682a379e1bd16df2db1a99baa3e22534612b2f3997c140bb01b262a66bf140c24f92bc6686de092874c77b7049bbb
- TLSH T1FF4132F62722677382AF89E697E2574AA04500537CD80BF0FBEC65103F56ED9BC8A501
- MD5 SHA1 SHA512 TLSH
Score7/10-
File and Directory Permissions Modification
Adversaries may modify file or directory permissions to evade defenses.
-
Executes dropped EXE
-
Modifies Watchdog functionality
Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.
-
Enumerates running processes
Discovers information about currently running processes on the system
-
Writes file to system bin folder