General
- Target e0d7c7df9562bef40c41835803a4af04a04f4f48f201e56c6f60dc58ae8c65e4_comment-insertion.sh
- Size 832KB
- Sample260913-wfhdqs1cka
- SHA256 39182603d03edb4ce610db3c244d5c425a740cd487405d843e3d30a7faa871af
- MD5 5c1166b2bbb2a36cc64f9be24c7700c3
- SHA1 9dafcbea3233cc7a6fb3ef59fd5e6480374a29c7
- SHA512 665a484f57925dbc36b0798462693c589e45a04816c94a8e3e9fed8d3ec0e58c8c8c94ae702f106939630dd9dc0e9dfbf572c833f298be9f36bd6f7cebf5c67e
- SSDEEP 24576:U4Y/f/tir8ZLQbdyUHiw5y3dSkohUv2653DmIfkeB:+/o8ZatHiw5ycMVmKkeB
- TLSH T1B7052308F11B8C38ED4E3C8CE89EEBDD192520A28B55E1475A6534AE7E347DC807A75F
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
e0d7c7df9562bef40c41835803a4af04a04f4f48f201e56c6f60dc58ae8c65e4_comment-insertion.sh
Resource
ubuntu1804-amd64-20260513-en
Behavioral task
behavioral2
Sample
e0d7c7df9562bef40c41835803a4af04a04f4f48f201e56c6f60dc58ae8c65e4_comment-insertion.sh
Resource
debian9-armhf-20260513-en
Behavioral task
behavioral3
Sample
e0d7c7df9562bef40c41835803a4af04a04f4f48f201e56c6f60dc58ae8c65e4_comment-insertion.sh
Resource
debian9-mipsbe-20260513-en
Behavioral task
behavioral4
Sample
e0d7c7df9562bef40c41835803a4af04a04f4f48f201e56c6f60dc58ae8c65e4_comment-insertion.sh
Resource
debian9-mipsel-20260513-en
Malware Config
Targets
-
- Target e0d7c7df9562bef40c41835803a4af04a04f4f48f201e56c6f60dc58ae8c65e4_comment-insertion.sh
- Size 832KB
- SHA256 39182603d03edb4ce610db3c244d5c425a740cd487405d843e3d30a7faa871af
- MD5 5c1166b2bbb2a36cc64f9be24c7700c3
- SHA1 9dafcbea3233cc7a6fb3ef59fd5e6480374a29c7
- SHA512 665a484f57925dbc36b0798462693c589e45a04816c94a8e3e9fed8d3ec0e58c8c8c94ae702f106939630dd9dc0e9dfbf572c833f298be9f36bd6f7cebf5c67e
- SSDEEP 24576:U4Y/f/tir8ZLQbdyUHiw5y3dSkohUv2653DmIfkeB:+/o8ZatHiw5ycMVmKkeB
- TLSH T1B7052308F11B8C38ED4E3C8CE89EEBDD192520A28B55E1475A6534AE7E347DC807A75F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
File and Directory Permissions Modification
Adversaries may modify file or directory permissions to evade defenses.
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
MITRE ATT&CK Enterprise v16
Defense Evasion
Deobfuscate/Decode Files or Information
1File and Directory Permissions Modification
1Linux and Mac File and Directory Permissions Modification
1Virtualization/Sandbox Evasion
1System Checks
1