568b8febcab200adb7242c79a4c794761f21524e9ff54be5f8ea63cd00bd2ff8 | Triage™

Login
Reports

Overview

overview

6

Static

static

1

gdbgo.sh

ubuntu-18.04-amd64

6

gdbgo.sh

debian-9-armhf

6

gdbgo.sh

debian-9-mips

6

gdbgo.sh

debian-9-mipsel

6

Sharing

Copy URL Twitter E-mail

General

Target
gdbgo.sh
Size 605B
Sample261107-phy1yabx5x
SHA256 568b8febcab200adb7242c79a4c794761f21524e9ff54be5f8ea63cd00bd2ff8
MD5 60f0895860da9dce8a835d9380bb4ac4
SHA1 25fd8f9b2dc2923840a7d84607521fdb56a82727
SHA512 20c891bc87567c0ba8431f44e61ca87fd618f8a49bbd676a20bd5e23f345acfc085d4c191085b910ee13da31f18abd41a03a887eb1307bd2be87887af216bcff
TLSH
T174F0AC371090E53D9183DFA3DC92E116A47622CF1AEBB680F8A1B249852CA6A3003229
MD5 SHA1 SHA512 TLSH

Score

6^/10

defense_evasion linux privilege_escalation

Static task

static1

Behavioral task

behavioral1

Sample

gdbgo.sh

Resource

ubuntu1804-amd64-20261019-en

ubuntu-18.04-amd64

2 signatures

150 seconds

defense_evasion privilege_escalation

Behavioral task

behavioral2

Sample

gdbgo.sh

Resource

debian9-armhf-20260513-en

debian-9-armhf

2 signatures

150 seconds

defense_evasion privilege_escalation

Behavioral task

behavioral3

Sample

gdbgo.sh

Resource

debian9-mipsbe-20260513-en

debian-9-mips

2 signatures

150 seconds

defense_evasion privilege_escalation

Behavioral task

behavioral4

Sample

gdbgo.sh

Resource

debian9-mipsel-20260513-en

debian-9-mipsel

2 signatures

150 seconds

defense_evasion privilege_escalation

Malware Config

Targets

- Target
  gdbgo.sh
- Size 605B
- SHA256 568b8febcab200adb7242c79a4c794761f21524e9ff54be5f8ea63cd00bd2ff8
- MD5 60f0895860da9dce8a835d9380bb4ac4
- SHA1 25fd8f9b2dc2923840a7d84607521fdb56a82727
- SHA512 20c891bc87567c0ba8431f44e61ca87fd618f8a49bbd676a20bd5e23f345acfc085d4c191085b910ee13da31f18abd41a03a887eb1307bd2be87887af216bcff
- TLSH
  T174F0AC371090E53D9183DFA3DC92E116A47622CF1AEBB680F8A1B249852CA6A3003229
- MD5 SHA1 SHA512 TLSH
Score

6^/10

defense_evasion privilege_escalation
- Abuse Elevation Control Mechanism: Sudo and Sudo Caching
  Abuse sudo or cached sudo credentials to execute code.
  privilege_escalation defense_evasion
behavioral1 behavioral2 behavioral3 behavioral4

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Abuse Elevation Control Mechanism

Sudo and Sudo Caching

Defense Evasion

Abuse Elevation Control Mechanism

Sudo and Sudo Caching

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

defense_evasionprivilege_escalation

behavioral2

defense_evasionprivilege_escalation

behavioral3

defense_evasionprivilege_escalation

behavioral4

defense_evasionprivilege_escalation

© 2018-2026

Terms | Privacy