General
- Target 13960b7e69159907f67f84ce6398d29f73686602ef2c36d837237288f4fe8785_pre-append.sh
- Size 832KB
- Sample260913-wb2a2sttaz
- SHA256 0f025b2225bfaa3113a9d57bc1423c264776112f9031c9956bc9aa363bc4ce27
- MD5 5dc0d188abd26c92c505d5ffad1609b0
- SHA1 64b9b947c2d92ee4ae31a4cc2789d7fa6145d9a0
- SHA512 6e02875fecf6d0d00882cf8123e3302b3ff6838db6ca946eee07e984e676bb74a9419dcc860cf5a0e21c5a54907c45c19c64485fba457a855c50b2b4d6e02bd3
- SSDEEP 24576:x4Y/f/tir8ZLQbdyUHiw5y3dSkohUv2653DmIfkes:X/o8ZatHiw5ycMVmKkes
- TLSH T191052308F11B8C38ED4E3C8CE49EEBDD192520A28B55E1875A6534AE7E347DC807A75F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
Behavioral task
behavioral1
Sample
13960b7e69159907f67f84ce6398d29f73686602ef2c36d837237288f4fe8785_pre-append.sh
Resource
ubuntu1804-amd64-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
13960b7e69159907f67f84ce6398d29f73686602ef2c36d837237288f4fe8785_pre-append.sh
Resource
debian9-armhf-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral3
Sample
13960b7e69159907f67f84ce6398d29f73686602ef2c36d837237288f4fe8785_pre-append.sh
Resource
debian9-mipsbe-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral4
Sample
13960b7e69159907f67f84ce6398d29f73686602ef2c36d837237288f4fe8785_pre-append.sh
Resource
debian9-mipsel-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 13960b7e69159907f67f84ce6398d29f73686602ef2c36d837237288f4fe8785_pre-append.sh
- Size 832KB
- SHA256 0f025b2225bfaa3113a9d57bc1423c264776112f9031c9956bc9aa363bc4ce27
- MD5 5dc0d188abd26c92c505d5ffad1609b0
- SHA1 64b9b947c2d92ee4ae31a4cc2789d7fa6145d9a0
- SHA512 6e02875fecf6d0d00882cf8123e3302b3ff6838db6ca946eee07e984e676bb74a9419dcc860cf5a0e21c5a54907c45c19c64485fba457a855c50b2b4d6e02bd3
- SSDEEP 24576:x4Y/f/tir8ZLQbdyUHiw5y3dSkohUv2653DmIfkes:X/o8ZatHiw5ycMVmKkes
- TLSH T191052308F11B8C38ED4E3C8CE49EEBDD192520A28B55E1875A6534AE7E347DC807A75F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
File and Directory Permissions Modification
Adversaries may modify file or directory permissions to evade defenses.
-
Executes dropped EXE