Analysis

  • max time kernel
    0s
  • platform
    debian-9_armhf
  • resource
    debian9-armhf-20260513-en
  • resource tags

    arch:armhfimage:debian9-armhf-20260513-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem
  • submitted
    12/09/2026, 10:11

General

  • Target
    Rus_Games_And_Sites_Unlocker_1-main/Sites-unlocker-rus/bin/blockcheck/zapret/blog.sh
  • Size 220B
  • Sample260912-l735eahe55
  • SHA256 66f32fa4470cd63a4014da8fa10af11a25862f564e53016d1b790f82c2d83760
  • MD5 SHA1 SHA512 TLSH
Score
3/10

Malware Config

Signatures

  • Writes file to tmp directory 1 IoCs

    Malware often drops required files in the /tmp directory.

Processes

  • /tmp/Rus_Games_And_Sites_Unlocker_1-main/Sites-unlocker-rus/bin/blockcheck/zapret/blog.sh
    /tmp/Rus_Games_And_Sites_Unlocker_1-main/Sites-unlocker-rus/bin/blockcheck/zapret/blog.sh
    1⤵
      PID:742
      • /usr/bin/dirname
        dirname /tmp/Rus_Games_And_Sites_Unlocker_1-main/Sites-unlocker-rus/bin/blockcheck/zapret/blog.sh
        2⤵
          PID:743
        • /tmp/Rus_Games_And_Sites_Unlocker_1-main/Sites-unlocker-rus/bin/blockcheck/zapret/blockcheck.sh
          /tmp/Rus_Games_And_Sites_Unlocker_1-main/Sites-unlocker-rus/bin/blockcheck/zapret/blockcheck.sh
          2⤵
            PID:746
          • /usr/bin/tee
            tee /tmp/Rus_Games_And_Sites_Unlocker_1-main/Sites-unlocker-rus/bin/blockcheck/zapret/../blockcheck.log
            2⤵
            • Writes file to tmp directory
            PID:747

        Network

              MITRE ATT&CK Matrix

              Replay Monitor

              Loading Replay Monitor...

              Downloads