Overview

overview

4

Static

static

1

Idk 2.sh

ubuntu-18.04-amd64

4

Idk 2.sh

debian-9-armhf

4

Idk 2.sh

debian-9-mips

1

Idk 2.sh

debian-9-mipsel

1

Analysis

  • max time kernel
    0s
  • platform
    debian-9_armhf
  • resource
    debian9-armhf-20260513-en
  • resource tags

    arch:armhfimage:debian9-armhf-20260513-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem
  • submitted
    20/10/2026, 21:35

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    Idk 2.sh
  • Size 2KB
  • Sample261020-1fe1tsft8t
  • SHA256 e4f5c7946155e2e8a647f3e61e4bc2badbe35db6e57c951399837967e687a357
  • MD5 SHA1 SHA512 TLSH
Score
4/10
antivm

Malware Config

Signatures

  • Checks CPU configuration 1 TTPs 1 IoCs

    Checks CPU information which indicate if the system is a virtual machine.

    antivm

Processes

  • /tmp/Idk 2.sh
    "/tmp/Idk 2.sh"
    1⤵
      PID:649
    • /usr/local/sbin/bash
      bash "/tmp/Idk 2.sh"
      1⤵
        PID:649
      • /usr/local/bin/bash
        bash "/tmp/Idk 2.sh"
        1⤵
          PID:649
        • /usr/sbin/bash
          bash "/tmp/Idk 2.sh"
          1⤵
            PID:649
          • /usr/bin/bash
            bash "/tmp/Idk 2.sh"
            1⤵
              PID:649
            • /sbin/bash
              bash "/tmp/Idk 2.sh"
              1⤵
                PID:649
              • /bin/bash
                bash "/tmp/Idk 2.sh"
                1⤵
                  PID:649
                  • /bin/grep
                    grep -qiE "hypervisor|qemu|vmware|virtualbox|kvm|bhyve" /proc/cpuinfo
                    2⤵
                    • Checks CPU configuration
                    PID:657

                Network

                      MITRE ATT&CK Enterprise v16

                      Replay Monitor

                      Loading Replay Monitor...

                      Downloads