General
- Target WSW0.sh
- Size 263B
- Sample260925-2nxfhsaa96
- SHA256 e6fc448db82da2649c7efe3ca6f408c0c5f83aaff89fc9fa1298af878f829b35
- MD5 24e3f1cb26a0b96efb10d571508dcadb
- SHA1 1dcc1eca83dc9175a075bffc211a632f1dfff440
- SHA512 1eb6c57d6fdc6dbb5fd2a3337a564d1e5a9e0e6af5cdbef4b5c58066614358fb6f605ed8b8723bd3a131401902712eadc45cad1d03663ee2164a070c1be6e1ce
- TLSH T123D097A37373113420F10874F0EA7410B0185BBE4C2AD6ABB41310301F56308F0D2BA4
- MD5 SHA1 SHA512 TLSH
Static task
static1
Behavioral task
behavioral1
Sample
WSW0.sh
Resource
ubuntu1804-amd64-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
WSW0.sh
Resource
debian9-armhf-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral3
Sample
WSW0.sh
Resource
debian9-mipsbe-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral4
Sample
WSW0.sh
Resource
debian9-mipsel-20260513-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target WSW0.sh
- Size 263B
- SHA256 e6fc448db82da2649c7efe3ca6f408c0c5f83aaff89fc9fa1298af878f829b35
- MD5 24e3f1cb26a0b96efb10d571508dcadb
- SHA1 1dcc1eca83dc9175a075bffc211a632f1dfff440
- SHA512 1eb6c57d6fdc6dbb5fd2a3337a564d1e5a9e0e6af5cdbef4b5c58066614358fb6f605ed8b8723bd3a131401902712eadc45cad1d03663ee2164a070c1be6e1ce
- TLSH T123D097A37373113420F10874F0EA7410B0185BBE4C2AD6ABB41310301F56308F0D2BA4
- MD5 SHA1 SHA512 TLSH
-
File and Directory Permissions Modification
Adversaries may modify file or directory permissions to evade defenses.
-
Executes dropped EXE
-
OS Credential Dumping
Adversaries may attempt to dump credentials to use it in password cracking.
MITRE ATT&CK Enterprise v16
Defense Evasion
File and Directory Permissions Modification
1Linux and Mac File and Directory Permissions Modification
1Virtualization/Sandbox Evasion
1System Checks
1