General
- Target 1c8ccda72671132190340a819e4689f94fbc317970d1da3dc44fafa8fb9d1456_offset-manipulation.sh
- Size 833KB
- Sample260913-vdbyhaswgy
- SHA256 1b57536d3821ac446e2d7481dfd436c523afd48eef66ff9b84df7f426fb26541
- MD5 4fb938e6d6819e5649d358e2df30299c
- SHA1 ad0a5477c5ee4f71d29f4676c389cf9cf5de0e71
- SHA512 42ababa4ca7ab11db5504dfaf5d85fe03fa81ccc8e55d4b45dba747aa7b0aa54485a1fbf1779856e985f3b6b628ba49281c7b55d4e4fca5353472a468eadd854
- SSDEEP 24576:V4Y/f/tir8ZLQbdyUHiw5y3dSkohUv2653DmIfkeY:z/o8ZatHiw5ycMVmKkeY
- TLSH T1C9052348E11B8C38ED0E3C8CE49EEBDD192520A24B55E1876A65346D7E347DC80BA79F
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
1c8ccda72671132190340a819e4689f94fbc317970d1da3dc44fafa8fb9d1456_offset-manipulation.sh
Resource
ubuntu1804-amd64-20260513-en
Behavioral task
behavioral2
Sample
1c8ccda72671132190340a819e4689f94fbc317970d1da3dc44fafa8fb9d1456_offset-manipulation.sh
Resource
debian9-armhf-20260513-en
Behavioral task
behavioral3
Sample
1c8ccda72671132190340a819e4689f94fbc317970d1da3dc44fafa8fb9d1456_offset-manipulation.sh
Resource
debian9-mipsbe-20260513-en
Behavioral task
behavioral4
Sample
1c8ccda72671132190340a819e4689f94fbc317970d1da3dc44fafa8fb9d1456_offset-manipulation.sh
Resource
debian9-mipsel-20260513-en
Malware Config
Targets
-
- Target 1c8ccda72671132190340a819e4689f94fbc317970d1da3dc44fafa8fb9d1456_offset-manipulation.sh
- Size 833KB
- SHA256 1b57536d3821ac446e2d7481dfd436c523afd48eef66ff9b84df7f426fb26541
- MD5 4fb938e6d6819e5649d358e2df30299c
- SHA1 ad0a5477c5ee4f71d29f4676c389cf9cf5de0e71
- SHA512 42ababa4ca7ab11db5504dfaf5d85fe03fa81ccc8e55d4b45dba747aa7b0aa54485a1fbf1779856e985f3b6b628ba49281c7b55d4e4fca5353472a468eadd854
- SSDEEP 24576:V4Y/f/tir8ZLQbdyUHiw5y3dSkohUv2653DmIfkeY:z/o8ZatHiw5ycMVmKkeY
- TLSH T1C9052348E11B8C38ED0E3C8CE49EEBDD192520A24B55E1876A65346D7E347DC80BA79F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
File and Directory Permissions Modification
Adversaries may modify file or directory permissions to evade defenses.
-
Executes dropped EXE
-
Enumerates running processes
Discovers information about currently running processes on the system