General
- Target wr.php.sh
- Size 26KB
- Sample260913-v8b7ra1ane
- SHA256 058bb2d23d4ef8561faa1991315f5726edaee7906bbd818b72ef0ce5582a082d
- MD5 3fdd6b9c1fde9e0bf947d68885c92c4b
- SHA1 fd10e69aefbad3a5380c3d95cf81989537490887
- SHA512 496bbdebd9af55bfc755e847a5ba3eba0e8d22249c63d65464afa0dbad1138e2b2e77690e1c428fc70ec6ea6bdb9e30cd4dd5e6d377d12997d83ae6b13efd17b
- SSDEEP 768:5s8vCB+25j6es8RW9FYpMSUpi+20qUpi+20YQX:u8l25JAd2QX
- TLSH T110C27D966A867C44BEC94B3E4CBD2B1D6DF5C3D1224942AC3D8B3C719C15FACC618B1A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
Behavioral task
behavioral1
Sample
wr.php.sh
Resource
ubuntu1804-amd64-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
wr.php.sh
Resource
debian9-armhf-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral3
Sample
wr.php.sh
Resource
debian9-mipsbe-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral4
Sample
wr.php.sh
Resource
debian9-mipsel-20260513-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target wr.php.sh
- Size 26KB
- SHA256 058bb2d23d4ef8561faa1991315f5726edaee7906bbd818b72ef0ce5582a082d
- MD5 3fdd6b9c1fde9e0bf947d68885c92c4b
- SHA1 fd10e69aefbad3a5380c3d95cf81989537490887
- SHA512 496bbdebd9af55bfc755e847a5ba3eba0e8d22249c63d65464afa0dbad1138e2b2e77690e1c428fc70ec6ea6bdb9e30cd4dd5e6d377d12997d83ae6b13efd17b
- SSDEEP 768:5s8vCB+25j6es8RW9FYpMSUpi+20qUpi+20YQX:u8l25JAd2QX
- TLSH T110C27D966A867C44BEC94B3E4CBD2B1D6DF5C3D1224942AC3D8B3C719C15FACC618B1A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
File and Directory Permissions Modification
Adversaries may modify file or directory permissions to evade defenses.