General
- Target 6bcae8f7016b166affdff426d2269c23feb5fcf5f482ee809976adea3e0f9453_post-append.sh
- Size 831KB
- Sample260913-vhr6aaha55
- SHA256 9bbb041a7153360497b80948a73f918b9bc73f4123a2d812def628cdc28db717
- MD5 30db407fd89ca28aef91283902301962
- SHA1 9c145d38047eaa5d904109f08881171bf7ca3ecd
- SHA512 684ab34e7548b728e81e2c0b7f886c92955ca2f6efc32ee07f2c0244827bc90f79bcc7a24d5e1e68d8071245fe6712336cf7dfe15809e72091f229587a2da468
- SSDEEP 24576:T4Y/f/tir8ZLQbdyUHiw5y3dSkohUv2653DmIfkef:J/o8ZatHiw5ycMVmKkef
- TLSH T136052308F11B8C38ED0E3C8CE49EEFDD192560A28B55E1475A6534AE7A347DC807A75F
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
6bcae8f7016b166affdff426d2269c23feb5fcf5f482ee809976adea3e0f9453_post-append.sh
Resource
ubuntu1804-amd64-20260513-en
Behavioral task
behavioral2
Sample
6bcae8f7016b166affdff426d2269c23feb5fcf5f482ee809976adea3e0f9453_post-append.sh
Resource
debian9-armhf-20260513-en
Behavioral task
behavioral3
Sample
6bcae8f7016b166affdff426d2269c23feb5fcf5f482ee809976adea3e0f9453_post-append.sh
Resource
debian9-mipsbe-20260513-en
Behavioral task
behavioral4
Sample
6bcae8f7016b166affdff426d2269c23feb5fcf5f482ee809976adea3e0f9453_post-append.sh
Resource
debian9-mipsel-20260513-en
Malware Config
Targets
-
- Target 6bcae8f7016b166affdff426d2269c23feb5fcf5f482ee809976adea3e0f9453_post-append.sh
- Size 831KB
- SHA256 9bbb041a7153360497b80948a73f918b9bc73f4123a2d812def628cdc28db717
- MD5 30db407fd89ca28aef91283902301962
- SHA1 9c145d38047eaa5d904109f08881171bf7ca3ecd
- SHA512 684ab34e7548b728e81e2c0b7f886c92955ca2f6efc32ee07f2c0244827bc90f79bcc7a24d5e1e68d8071245fe6712336cf7dfe15809e72091f229587a2da468
- SSDEEP 24576:T4Y/f/tir8ZLQbdyUHiw5y3dSkohUv2653DmIfkef:J/o8ZatHiw5ycMVmKkef
- TLSH T136052308F11B8C38ED0E3C8CE49EEFDD192560A28B55E1475A6534AE7A347DC807A75F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
File and Directory Permissions Modification
Adversaries may modify file or directory permissions to evade defenses.
-
Executes dropped EXE
-
Enumerates running processes
Discovers information about currently running processes on the system
-
Write file to user bin folder