General
- Target zyxel.sh
- Size 2KB
- Sample261027-mgqbaszz3l
- SHA256 6325c8ac334cfdd103648f5065c2ea69e850e6f5d736ca6430d84724180f58bf
- MD5 b700a0b5332ff09f0a41833935b294aa
- SHA1 52b90f14812a64a5d78a85410eddc26e1161cf2a
- SHA512 e28d3532da8ea3dd085019017e7a3580c00e39a2fcaf5825ffd547848c6a0adeba524a4c61c6ff0d2c6962644dfb06464faeb4d64375b3ac5c2bc71ae9f012e7
- TLSH T1BE5132C50773C9387969FD0F3DE68B14B9C4E4916CC2AA84B6EC79ED0ACEE28584C147
- MD5 SHA1 SHA512 TLSH
Score
7/10
Static task
static1
Behavioral task
behavioral1
Sample
zyxel.sh
Resource
ubuntu1804-amd64-20261019-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
zyxel.sh
Resource
debian9-armhf-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral3
Sample
zyxel.sh
Resource
debian9-mipsbe-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral4
Sample
zyxel.sh
Resource
debian9-mipsel-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target zyxel.sh
- Size 2KB
- SHA256 6325c8ac334cfdd103648f5065c2ea69e850e6f5d736ca6430d84724180f58bf
- MD5 b700a0b5332ff09f0a41833935b294aa
- SHA1 52b90f14812a64a5d78a85410eddc26e1161cf2a
- SHA512 e28d3532da8ea3dd085019017e7a3580c00e39a2fcaf5825ffd547848c6a0adeba524a4c61c6ff0d2c6962644dfb06464faeb4d64375b3ac5c2bc71ae9f012e7
- TLSH T1BE5132C50773C9387969FD0F3DE68B14B9C4E4916CC2AA84B6EC79ED0ACEE28584C147
- MD5 SHA1 SHA512 TLSH
Score7/10-
File and Directory Permissions Modification
Adversaries may modify file or directory permissions to evade defenses.
-
Executes dropped EXE
-
Traces itself
Traces itself to prevent debugging attempts
MITRE ATT&CK Enterprise v16
Defense Evasion
File and Directory Permissions Modification
1Linux and Mac File and Directory Permissions Modification
1Virtualization/Sandbox Evasion
1System Checks
1