568b8febcab200adb7242c79a4c794761f21524e9ff54be5f8ea63cd00bd2ff8

Analysis

max time kernel
2s
platform
debian-9_armhf
resource
debian9-armhf-20260513-en
resource tags

arch:armhfimage:debian9-armhf-20260513-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem
submitted
07/11/2026, 12:20

Target
gdbgo.sh
Size 605B
Sample261107-phyeeabx4z
SHA256 568b8febcab200adb7242c79a4c794761f21524e9ff54be5f8ea63cd00bd2ff8
MD5 60f0895860da9dce8a835d9380bb4ac4
SHA1 25fd8f9b2dc2923840a7d84607521fdb56a82727
SHA512 20c891bc87567c0ba8431f44e61ca87fd618f8a49bbd676a20bd5e23f345acfc085d4c191085b910ee13da31f18abd41a03a887eb1307bd2be87887af216bcff
TLSH
T174F0AC371090E53D9183DFA3DC92E116A47622CF1AEBB680F8A1B249852CA6A3003229
MD5 SHA1 SHA512 TLSH

Score

6^/10

Abuse Elevation Control Mechanism: Sudo and Sudo Caching 1 TTPs 3 IoCs

Abuse sudo or cached sudo credentials to execute code.

Sudo and Sudo Caching

pid	Process
674	env
674