General
- Target 83b524467cb1eb5c4807b0f4cec93c5efe6f3b1bbd15f711f4462b15706b863b_offset-manipulation.sh
- Size 832KB
- Sample260913-vx29sss1cs
- SHA256 915e2777fcc06feac8d6a667fd0037a17fa4ded4982b6e13a7a2859e9d1323bf
- MD5 2794402910d4a75c38e889371d5a6d90
- SHA1 f40489fdcc745e02bb86019087274aa5f2efbb0c
- SHA512 44a8df9d6827e529068898f8122f1196f80f0900a9bc810501c6235a30c50c34f5357a3c2148076d07fc00cf9b63f511ffd28b783017f0059d9aa4c875a2f731
- SSDEEP 24576:V4Y/f/tir8ZLQbdyUHiw5y3dSkohUv2653DmIfkeo:z/o8ZatHiw5ycMVmKkeo
- TLSH T127052308F11B8C38ED4E3C8CE49EEBDD192520A28B55E1475A6534AE7E347DC807A75F
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
83b524467cb1eb5c4807b0f4cec93c5efe6f3b1bbd15f711f4462b15706b863b_offset-manipulation.sh
Resource
ubuntu1804-amd64-20260513-en
Behavioral task
behavioral2
Sample
83b524467cb1eb5c4807b0f4cec93c5efe6f3b1bbd15f711f4462b15706b863b_offset-manipulation.sh
Resource
debian9-armhf-20260513-en
Behavioral task
behavioral3
Sample
83b524467cb1eb5c4807b0f4cec93c5efe6f3b1bbd15f711f4462b15706b863b_offset-manipulation.sh
Resource
debian9-mipsbe-20260513-en
Behavioral task
behavioral4
Sample
83b524467cb1eb5c4807b0f4cec93c5efe6f3b1bbd15f711f4462b15706b863b_offset-manipulation.sh
Resource
debian9-mipsel-20260513-en
Malware Config
Targets
-
- Target 83b524467cb1eb5c4807b0f4cec93c5efe6f3b1bbd15f711f4462b15706b863b_offset-manipulation.sh
- Size 832KB
- SHA256 915e2777fcc06feac8d6a667fd0037a17fa4ded4982b6e13a7a2859e9d1323bf
- MD5 2794402910d4a75c38e889371d5a6d90
- SHA1 f40489fdcc745e02bb86019087274aa5f2efbb0c
- SHA512 44a8df9d6827e529068898f8122f1196f80f0900a9bc810501c6235a30c50c34f5357a3c2148076d07fc00cf9b63f511ffd28b783017f0059d9aa4c875a2f731
- SSDEEP 24576:V4Y/f/tir8ZLQbdyUHiw5y3dSkohUv2653DmIfkeo:z/o8ZatHiw5ycMVmKkeo
- TLSH T127052308F11B8C38ED4E3C8CE49EEBDD192520A28B55E1475A6534AE7E347DC807A75F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
File and Directory Permissions Modification
Adversaries may modify file or directory permissions to evade defenses.
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
MITRE ATT&CK Enterprise v16
Defense Evasion
Deobfuscate/Decode Files or Information
1File and Directory Permissions Modification
1Linux and Mac File and Directory Permissions Modification
1Virtualization/Sandbox Evasion
1System Checks
1