General
- Target cur.sh
- Size 7KB
- Sample261002-xmmsgax15j
- SHA256 2d3dcbeffb68ab8d4f0ada8a907d435852c7d2c8a19feed18441274c2f7b9648
- MD5 300d70c24a3f36848f7f9e212e5eaa8b
- SHA1 88371cf3312027c78eb17715f398daad045a3bfb
- SHA512 b13689a0a6ac68f7d05f672fb321d4f1571959844b342f62326ee87ff16119224128b10a8fa80576d820987c5c273a5b5d65d71b8cfe10766d855c417e75d421
- SSDEEP 96:tbAfL58OZyrQH/Wg6PI6NVpmpEckSCBzIprU9xrLrqDN1SjaGBjA5eZj33PMjH:NyV8OZB1T6NHSCkUL3q3BuPi
- TLSH T1BEF13FF9F620C635B80DC63DF659A5928E83987F06B87B60B44BEC28361C54C712E676
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
cur.sh
Resource
ubuntu1804-amd64-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
cur.sh
Resource
debian9-armhf-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral3
Sample
cur.sh
Resource
debian9-mipsbe-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral4
Sample
cur.sh
Resource
debian9-mipsel-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target cur.sh
- Size 7KB
- SHA256 2d3dcbeffb68ab8d4f0ada8a907d435852c7d2c8a19feed18441274c2f7b9648
- MD5 300d70c24a3f36848f7f9e212e5eaa8b
- SHA1 88371cf3312027c78eb17715f398daad045a3bfb
- SHA512 b13689a0a6ac68f7d05f672fb321d4f1571959844b342f62326ee87ff16119224128b10a8fa80576d820987c5c273a5b5d65d71b8cfe10766d855c417e75d421
- SSDEEP 96:tbAfL58OZyrQH/Wg6PI6NVpmpEckSCBzIprU9xrLrqDN1SjaGBjA5eZj33PMjH:NyV8OZB1T6NHSCkUL3q3BuPi
- TLSH T1BEF13FF9F620C635B80DC63DF659A5928E83987F06B87B60B44BEC28361C54C712E676
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Creates/modifies Cron job
Cron allows running tasks on a schedule, and is commonly used for malware persistence.
-
Enumerates running processes
Discovers information about currently running processes on the system
MITRE ATT&CK Enterprise v16
Tasks
static1
Score
1/10
behavioral1
discoveryexecutionpersistenceprivilege_escalation
Score
6/10
behavioral2
discoveryexecutionpersistenceprivilege_escalation
Score
6/10
behavioral3
discoveryexecutionpersistenceprivilege_escalation
Score
6/10
behavioral4
discoveryexecutionpersistenceprivilege_escalation
Score
6/10