General
- Target 19680b70becbd4f0a44115dfa79a717603d530e2826cc6ff6d5645baba9a05c0_pre-append.sh
- Size 833KB
- Sample260913-wagj9abl4v
- SHA256 fb5cdd2bfa5404a81092931dd961b9c4eac9d1cbc9ac002f33a369b6d86d7631
- MD5 52e93fcdcae9b6bdd60c668d8314d19e
- SHA1 46f2336f0f4e0ed1dc2747e9df84661c68137083
- SHA512 48f1fbda377cec3f713b5beb498172314ec4bdcccec1177bd7cd4c9281ee5e7f56b5ce65ccf683d1168f8f1018a9995ed4ff4c0117189e23a459582a17f1a9ca
- SSDEEP 24576:x4Y/f/tir8ZLQbdyUHiw5y3dSkohUv2653DmIfkeI:X/o8ZatHiw5ycMVmKkeI
- TLSH T1FD052308F11B8C38ED4E3C8CE49EEBDD192520A28B55E1875A6534AE7E347DC807A75F
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
19680b70becbd4f0a44115dfa79a717603d530e2826cc6ff6d5645baba9a05c0_pre-append.sh
Resource
ubuntu1804-amd64-20260513-en
Behavioral task
behavioral2
Sample
19680b70becbd4f0a44115dfa79a717603d530e2826cc6ff6d5645baba9a05c0_pre-append.sh
Resource
debian9-armhf-20260513-en
Behavioral task
behavioral3
Sample
19680b70becbd4f0a44115dfa79a717603d530e2826cc6ff6d5645baba9a05c0_pre-append.sh
Resource
debian9-mipsbe-20260513-en
Behavioral task
behavioral4
Sample
19680b70becbd4f0a44115dfa79a717603d530e2826cc6ff6d5645baba9a05c0_pre-append.sh
Resource
debian9-mipsel-20260513-en
Malware Config
Targets
-
- Target 19680b70becbd4f0a44115dfa79a717603d530e2826cc6ff6d5645baba9a05c0_pre-append.sh
- Size 833KB
- SHA256 fb5cdd2bfa5404a81092931dd961b9c4eac9d1cbc9ac002f33a369b6d86d7631
- MD5 52e93fcdcae9b6bdd60c668d8314d19e
- SHA1 46f2336f0f4e0ed1dc2747e9df84661c68137083
- SHA512 48f1fbda377cec3f713b5beb498172314ec4bdcccec1177bd7cd4c9281ee5e7f56b5ce65ccf683d1168f8f1018a9995ed4ff4c0117189e23a459582a17f1a9ca
- SSDEEP 24576:x4Y/f/tir8ZLQbdyUHiw5y3dSkohUv2653DmIfkeI:X/o8ZatHiw5ycMVmKkeI
- TLSH T1FD052308F11B8C38ED4E3C8CE49EEBDD192520A28B55E1875A6534AE7E347DC807A75F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
File and Directory Permissions Modification
Adversaries may modify file or directory permissions to evade defenses.
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
MITRE ATT&CK Enterprise v16
Defense Evasion
Deobfuscate/Decode Files or Information
1File and Directory Permissions Modification
1Linux and Mac File and Directory Permissions Modification
1Virtualization/Sandbox Evasion
1System Checks
1