Overview

overview

3

Static

static

1

smashtest.sh

ubuntu-18.04-amd64

3

smashtest.sh

debian-9-armhf

3

smashtest.sh

debian-9-mips

3

smashtest.sh

debian-9-mipsel

3

Analysis

  • max time kernel
    0s
  • platform
    debian-9_armhf
  • resource
    debian9-armhf-20260513-en
  • resource tags

    arch:armhfimage:debian9-armhf-20260513-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem
  • submitted
    07/11/2026, 12:20

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    smashtest.sh
  • Size 837B
  • Sample261107-phyeeabx4x
  • SHA256 b9b6d3fc222f1b18c066c52c202b0210fca7acb55dddc3dd37909bdfd0eff996
  • MD5 SHA1 SHA512 TLSH
Score
3/10

Malware Config

Signatures

  • Writes file to tmp directory 1 IoCs

    Malware often drops required files in the /tmp directory.

Processes

  • /tmp/smashtest.sh
    /tmp/smashtest.sh
    1⤵
    • Writes file to tmp directory
    PID:647
    • /usr/bin/head
      head -1
      2⤵
        PID:660
      • /bin/grep
        grep -oP "memory corruption: \\K0x[0-9a-f]+" /tmp/sm__.txt
        2⤵
          PID:659

      Network

            MITRE ATT&CK Matrix

            Replay Monitor

            Loading Replay Monitor...

            Downloads

            sm__.txt
            • Path /tmp/sm__.txt
            • Size 50B
            • SHA256 de7b7645e20361769d456cc50a788cd4da2a95603b568a75a964ded0bb954ddf
            • MD5 SHA1 SHA512 TLSH
            Submit Download