General
- Target wr.php.sh
- Size 26KB
- Sample260919-3qpdcsgn2v
- SHA256 43c586da1fbaeaf2c284949c23d06ec0f670035a17c243a87da633eef260b514
- MD5 9a1b2150541d912057fad58c28dcf443
- SHA1 3b707278f470dabf849e5319dcd48b75e84133ab
- SHA512 3ffde05b8defa69366a7c07086d399bccddab68bbb2300e82852fb6aec749d69e89a7b2a7e2b61a8409c2c578d2218ec45e01f36f1120bbf5c10528564c57316
- SSDEEP 768:m8vCB+25j6es8RI9FYpMSUpi+20qUpi+20YQX:m8l25Jed2QX
- TLSH T172C27C956A967C44BEC94A3E4CBD2B0D6DF5C3E1324942AC3D8B3C719C11FACD618B1A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
Behavioral task
behavioral1
Sample
wr.php.sh
Resource
ubuntu1804-amd64-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
wr.php.sh
Resource
debian9-armhf-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral3
Sample
wr.php.sh
Resource
debian9-mipsbe-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral4
Sample
wr.php.sh
Resource
debian9-mipsel-20260513-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target wr.php.sh
- Size 26KB
- SHA256 43c586da1fbaeaf2c284949c23d06ec0f670035a17c243a87da633eef260b514
- MD5 9a1b2150541d912057fad58c28dcf443
- SHA1 3b707278f470dabf849e5319dcd48b75e84133ab
- SHA512 3ffde05b8defa69366a7c07086d399bccddab68bbb2300e82852fb6aec749d69e89a7b2a7e2b61a8409c2c578d2218ec45e01f36f1120bbf5c10528564c57316
- SSDEEP 768:m8vCB+25j6es8RI9FYpMSUpi+20qUpi+20YQX:m8l25Jed2QX
- TLSH T172C27C956A967C44BEC94A3E4CBD2B0D6DF5C3E1324942AC3D8B3C719C11FACD618B1A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
File and Directory Permissions Modification
Adversaries may modify file or directory permissions to evade defenses.