General
- Target 6b94e16e486df4ae0960c0cf0ce0e0425a5b9a4b98ea18503468d4cdde93409e_offset-manipulation.sh
- Size 832KB
- Sample260913-v1j8dss1fx
- SHA256 bb943baf7d0955268c0c88033a0e6aa439cc7c2c96e240de52b16b80fcd5b93f
- MD5 2bf448dbb9e82923dbeafbdf2dce72c0
- SHA1 e4d8adf4a9a0834e4ece8188bb315fef36cfbdeb
- SHA512 9e8398e8b5d9194fd2426f46d8188b01f203d98caad318db3eaece7f369fa50d1add8a16adb49fbdcb26d97ce2491dde3e61a358a5fbaa1eab7c48d33fee2e0a
- SSDEEP 24576:V4Y/f/tir8ZLQbdyUHiw5y3dSkohUv2653DmIfkem:z/o8ZatHiw5ycMVmKkem
- TLSH T182052308F11B8C38ED4E3C8CE89EEBDD192520A28B55E1475A6534AE7E347DC806A75F
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
6b94e16e486df4ae0960c0cf0ce0e0425a5b9a4b98ea18503468d4cdde93409e_offset-manipulation.sh
Resource
ubuntu1804-amd64-20260513-en
Behavioral task
behavioral2
Sample
6b94e16e486df4ae0960c0cf0ce0e0425a5b9a4b98ea18503468d4cdde93409e_offset-manipulation.sh
Resource
debian9-armhf-20260513-en
Behavioral task
behavioral3
Sample
6b94e16e486df4ae0960c0cf0ce0e0425a5b9a4b98ea18503468d4cdde93409e_offset-manipulation.sh
Resource
debian9-mipsbe-20260513-en
Behavioral task
behavioral4
Sample
6b94e16e486df4ae0960c0cf0ce0e0425a5b9a4b98ea18503468d4cdde93409e_offset-manipulation.sh
Resource
debian9-mipsel-20260513-en
Malware Config
Targets
-
- Target 6b94e16e486df4ae0960c0cf0ce0e0425a5b9a4b98ea18503468d4cdde93409e_offset-manipulation.sh
- Size 832KB
- SHA256 bb943baf7d0955268c0c88033a0e6aa439cc7c2c96e240de52b16b80fcd5b93f
- MD5 2bf448dbb9e82923dbeafbdf2dce72c0
- SHA1 e4d8adf4a9a0834e4ece8188bb315fef36cfbdeb
- SHA512 9e8398e8b5d9194fd2426f46d8188b01f203d98caad318db3eaece7f369fa50d1add8a16adb49fbdcb26d97ce2491dde3e61a358a5fbaa1eab7c48d33fee2e0a
- SSDEEP 24576:V4Y/f/tir8ZLQbdyUHiw5y3dSkohUv2653DmIfkem:z/o8ZatHiw5ycMVmKkem
- TLSH T182052308F11B8C38ED4E3C8CE89EEBDD192520A28B55E1475A6534AE7E347DC806A75F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
File and Directory Permissions Modification
Adversaries may modify file or directory permissions to evade defenses.
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
MITRE ATT&CK Enterprise v16
Defense Evasion
Deobfuscate/Decode Files or Information
1File and Directory Permissions Modification
1Linux and Mac File and Directory Permissions Modification
1Virtualization/Sandbox Evasion
1System Checks
1