General
- Target deploy.sh
- Size 242KB
- Sample261018-ppvbbszsfy
- SHA256 9466fdca563ea6ced798df7c9a8314dad6e8c89a46854fad1723f7dea2612736
- MD5 cdaedc0ed80501bede19097cc93c2976
- SHA1 9fba65ad066d1d641d1a008447c816a47e517d51
- SHA512 d118d56fc0524c8e3387f822871f7daee6c6d20e17a05b92f8ad10b3102535b86fb7c19abd9d7006c61546a3839ffd9f19cb5d88f795c421ebe3440da92e1e12
- SSDEEP 6144:xUea1SaYiQhKrBlrY7xybzSmLLSsKpeHHyJ:xrS94cjrux6SmLq
- TLSH T10C348DF7498338DA38A44D58E8011E915C7D3B43547EE156F9CC39BBE3EA264CE18A38
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
Behavioral task
behavioral1
Sample
deploy.sh
Resource
ubuntu1804-amd64-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
deploy.sh
Resource
debian9-armhf-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral3
Sample
deploy.sh
Resource
debian9-mipsbe-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral4
Sample
deploy.sh
Resource
debian9-mipsel-20260513-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target deploy.sh
- Size 242KB
- SHA256 9466fdca563ea6ced798df7c9a8314dad6e8c89a46854fad1723f7dea2612736
- MD5 cdaedc0ed80501bede19097cc93c2976
- SHA1 9fba65ad066d1d641d1a008447c816a47e517d51
- SHA512 d118d56fc0524c8e3387f822871f7daee6c6d20e17a05b92f8ad10b3102535b86fb7c19abd9d7006c61546a3839ffd9f19cb5d88f795c421ebe3440da92e1e12
- SSDEEP 6144:xUea1SaYiQhKrBlrY7xybzSmLLSsKpeHHyJ:xrS94cjrux6SmLq
- TLSH T10C348DF7498338DA38A44D58E8011E915C7D3B43547EE156F9CC39BBE3EA264CE18A38
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
File and Directory Permissions Modification
Adversaries may modify file or directory permissions to evade defenses.
-
Executes dropped EXE
-
Reads MAC address of network interface
Fetches the MAC address of active network interfaces. May be used to detect known values for hypervisors.
MITRE ATT&CK Enterprise v16
Defense Evasion
Deobfuscate/Decode Files or Information
1File and Directory Permissions Modification
1Linux and Mac File and Directory Permissions Modification
1