General
- Target t.sh
- Size 153B
- Sample260930-g2knnatdmb
- SHA256 378c84b547b9c0158ce497f589aae592d465eb06ba7ab572e5c98a001a0a43e6
- MD5 8bc8fc5ce1b0a1e2e096932043039ce3
- SHA1 4501cb322d5b426f006f4b1c937526065f368f02
- SHA512 f49c0a84a5363aef15056add47130c8e3dc76be84c2ca83855856f901ced03709f645edcfdbd007cb432e2076843045684b1a696ce297afab67657eff1018641
- TLSH T1FAC08CEC0F0718A1148155233662B06BEA4AC2947CF0473C88CC4B25E046F0C3C3EF42
- MD5 SHA1 SHA512 TLSH
Score
7/10
Static task
static1
Behavioral task
behavioral1
Sample
t.sh
Resource
ubuntu1804-amd64-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
t.sh
Resource
debian9-armhf-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral3
Sample
t.sh
Resource
debian9-mipsbe-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral4
Sample
t.sh
Resource
debian9-mipsel-20260513-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target t.sh
- Size 153B
- SHA256 378c84b547b9c0158ce497f589aae592d465eb06ba7ab572e5c98a001a0a43e6
- MD5 8bc8fc5ce1b0a1e2e096932043039ce3
- SHA1 4501cb322d5b426f006f4b1c937526065f368f02
- SHA512 f49c0a84a5363aef15056add47130c8e3dc76be84c2ca83855856f901ced03709f645edcfdbd007cb432e2076843045684b1a696ce297afab67657eff1018641
- TLSH T1FAC08CEC0F0718A1148155233662B06BEA4AC2947CF0473C88CC4B25E046F0C3C3EF42
- MD5 SHA1 SHA512 TLSH
Score7/10-
File and Directory Permissions Modification
Adversaries may modify file or directory permissions to evade defenses.
-
Deletes itself
-
Executes dropped EXE
-
Removes the immutable protection flag from a file
Uses chattr to remove the immutable flag from a file, allowing previously write-protected files to be modified or deleted.