Analysis
- max time kernel
3s - max time network
5s - platform
debian-9_mipsel - resource
debian9-mipsel-20260513-en - resource tags
arch:mipselimage:debian9-mipsel-20260513-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipselsystem - submitted
18/10/2026, 12:22
Static task
static1
Behavioral task
behavioral1
Sample
install.sh
Resource
ubuntu1804-amd64-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
install.sh
Resource
debian9-armhf-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral3
Sample
install.sh
Resource
debian9-mipsbe-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral4
Sample
install.sh
Resource
debian9-mipsel-20260513-en
1 signatures
150 seconds
General
- Target install.sh
- Size 25KB
- Sample261018-pkd4jsxt2p
- SHA256 6eaf139e16d45849bebc4a7de0dbc2992fd3b3a86a3f37bf7922b685f3a60d9e
- MD5 bab61584dbc45ee3f1a5c1f47421c881
- SHA1 b13e69d7b27e2c3007b54586e7bb7bfd5a78fd90
- SHA512 87af5c0c546169c1be7820f558fd6e906a096ec36c02ebcb25f0e0394c9822691945b90cb8c4d6afff9c571d660b530f3b7fa2eed70442904dd2b708efa39017
- SSDEEP 768:j7h5Ajfz7+hRds+4Uw4EgCv9VrwZkyefXCF3cjUa4JECWNgcG:j7hWL7nv99wZkye6F3cX4JECWNgN
- TLSH T150C2F6167DE29A33034A51FD6E879042336D1007412A6DA4F69CB5883F746B8F6F3B6E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
-
description ioc Process File opened for reading /proc/sys/crypto/fips_enabled curl
Processes
-
/tmp/install.sh/tmp/install.sh1⤵PID:715
-
/usr/bin/curlcurl -s https://registry.npmjs.org/vite-plus/latest2⤵
- Reads runtime system information
PID:727
-
-
/bin/grepgrep -q "\"error\""2⤵PID:742
-
-
/bin/grepgrep -q "\"version\" *:"2⤵PID:745
-
-
/bin/grepgrep -o "\"version\" *: *\"[^\"]*\""2⤵PID:749
-
-
/usr/bin/headhead -12⤵PID:750
-
-
/usr/bin/cutcut "-d\"" -f42⤵PID:751
-
-
/bin/unameuname -s2⤵PID:755
-
-
/bin/unameuname -m2⤵PID:757
-