Overview

overview

3

Static

static

1

99296550ab...ion.sh

ubuntu-18.04-amd64

3

99296550ab...ion.sh

debian-9-armhf

3

99296550ab...ion.sh

debian-9-mips

3

99296550ab...ion.sh

debian-9-mipsel

3

Analysis

  • max time kernel
    0s
  • platform
    debian-9_armhf
  • resource
    debian9-armhf-20260513-en
  • resource tags

    arch:armhfimage:debian9-armhf-20260513-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem
  • submitted
    13/09/2026, 17:12

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    99296550ab836f29ab7b45f18f1a1cb17a102bb81cad83561f615f3a707887d7_comment-insertion.sh
  • Size 844KB
  • Sample260913-vqs3jsar4s
  • SHA256 4c56bae2d1af26b822c8d9ad39bced3c70dff3c2751efe3b9f5fb6fbfcc4cf59
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
discovery

Malware Config

Signatures

  • Reads runtime system information 1 IoCs

    Reads data from /proc virtual filesystem.

    discovery
  • Writes file to tmp directory 1 IoCs

    Malware often drops required files in the /tmp directory.

Processes

  • /tmp/99296550ab836f29ab7b45f18f1a1cb17a102bb81cad83561f615f3a707887d7_comment-insertion.sh
    /tmp/99296550ab836f29ab7b45f18f1a1cb17a102bb81cad83561f615f3a707887d7_comment-insertion.sh
    1⤵
    • Writes file to tmp directory
    PID:644
    • /usr/bin/id
      id -u
      2⤵
      • Reads runtime system information
      PID:662

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        sh-thd.dO0QW8
        • Path /tmp/sh-thd.dO0QW8
        • Size 827KB
        • SHA256 6ee616754a8ecd388763ecb5f663d7e13d4382c139d908529c69a1413617bc87
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download