General
- Target wr.php.sh
- Size 26KB
- Sample260915-lp1assfl81
- SHA256 f800d8048b4d76f8e3c01ac07d17066154eda4ef5bde657c2d3c7bfdde19a9a1
- MD5 68215ab930c2f68532ba4d8987e1939e
- SHA1 40c73e7c5269bfa08221faa99d24ecfff5840e1e
- SHA512 27a89847074af7857d17157473f04b7763543476cb0ff98f6a1a9133acb4551ed67b34670a8104e296a84a02166d5eb8af8b160c0640d288e687901b0fe8f983
- SSDEEP 768:W8vCB+25j6es8R18m9FYpMSUpi+20qUpi+20YQX:W8l25J18Qd2QX
- TLSH T16DC28D956A867C44BEC94A3E4CBD2B1D6DF5C3D1224942AC3D8B3C71DC15FACC618B2A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
Behavioral task
behavioral1
Sample
wr.php.sh
Resource
ubuntu1804-amd64-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
wr.php.sh
Resource
debian9-armhf-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral3
Sample
wr.php.sh
Resource
debian9-mipsbe-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral4
Sample
wr.php.sh
Resource
debian9-mipsel-20260513-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target wr.php.sh
- Size 26KB
- SHA256 f800d8048b4d76f8e3c01ac07d17066154eda4ef5bde657c2d3c7bfdde19a9a1
- MD5 68215ab930c2f68532ba4d8987e1939e
- SHA1 40c73e7c5269bfa08221faa99d24ecfff5840e1e
- SHA512 27a89847074af7857d17157473f04b7763543476cb0ff98f6a1a9133acb4551ed67b34670a8104e296a84a02166d5eb8af8b160c0640d288e687901b0fe8f983
- SSDEEP 768:W8vCB+25j6es8R18m9FYpMSUpi+20qUpi+20YQX:W8l25J18Qd2QX
- TLSH T16DC28D956A867C44BEC94A3E4CBD2B1D6DF5C3D1224942AC3D8B3C71DC15FACC618B2A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
File and Directory Permissions Modification
Adversaries may modify file or directory permissions to evade defenses.