General
- Target f44f787ed1febf572ad6b20f972e31dba769b8d19e82b55dcbf251efa0ef47ee_pre-append.sh
- Size 832KB
- Sample260913-wbtafabl41
- SHA256 feabe4a547a7c3cd983b520bbb9ef310ac29f17a7f7104c763f3a2e51b3b980e
- MD5 e0b0af75fee943627db4a98487774a35
- SHA1 484de72c9455efe45abcf65bfb9eae6520a2d855
- SHA512 3647d94a1a71e988c32da61ce06e674400df8a6743031ee94b27dfbc87ae0d9acd177fd62b4625d4bc5f8c8dda8e6d80776f10bd0f6acd72970b5a3c981f903c
- SSDEEP 24576:74Y/f/tir8ZLQbdyUHiw5y3dSkohUv2653DmIfkeM:R/o8ZatHiw5ycMVmKkeM
- TLSH T177052308F11B8C78ED4E3C8CE89EEBDD092520A28B55E1475A6534AE7E347DC807A75F
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
f44f787ed1febf572ad6b20f972e31dba769b8d19e82b55dcbf251efa0ef47ee_pre-append.sh
Resource
ubuntu1804-amd64-20260513-en
Behavioral task
behavioral2
Sample
f44f787ed1febf572ad6b20f972e31dba769b8d19e82b55dcbf251efa0ef47ee_pre-append.sh
Resource
debian9-armhf-20260513-en
Behavioral task
behavioral3
Sample
f44f787ed1febf572ad6b20f972e31dba769b8d19e82b55dcbf251efa0ef47ee_pre-append.sh
Resource
debian9-mipsbe-20260513-en
Behavioral task
behavioral4
Sample
f44f787ed1febf572ad6b20f972e31dba769b8d19e82b55dcbf251efa0ef47ee_pre-append.sh
Resource
debian9-mipsel-20260513-en
Malware Config
Targets
-
- Target f44f787ed1febf572ad6b20f972e31dba769b8d19e82b55dcbf251efa0ef47ee_pre-append.sh
- Size 832KB
- SHA256 feabe4a547a7c3cd983b520bbb9ef310ac29f17a7f7104c763f3a2e51b3b980e
- MD5 e0b0af75fee943627db4a98487774a35
- SHA1 484de72c9455efe45abcf65bfb9eae6520a2d855
- SHA512 3647d94a1a71e988c32da61ce06e674400df8a6743031ee94b27dfbc87ae0d9acd177fd62b4625d4bc5f8c8dda8e6d80776f10bd0f6acd72970b5a3c981f903c
- SSDEEP 24576:74Y/f/tir8ZLQbdyUHiw5y3dSkohUv2653DmIfkeM:R/o8ZatHiw5ycMVmKkeM
- TLSH T177052308F11B8C78ED4E3C8CE89EEBDD092520A28B55E1475A6534AE7E347DC807A75F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
File and Directory Permissions Modification
Adversaries may modify file or directory permissions to evade defenses.
-
Enumerates running processes
Discovers information about currently running processes on the system