Analysis
- max time kernel
4s - platform
debian-9_mips - resource
debian9-mipsbe-20260513-en - resource tags
arch:mipsimage:debian9-mipsbe-20260513-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipssystem - submitted
07/11/2026, 12:20
Static task
static1
Behavioral task
behavioral1
Sample
gdbgo.sh
Resource
ubuntu1804-amd64-20261019-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
gdbgo.sh
Resource
debian9-armhf-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral3
Sample
gdbgo.sh
Resource
debian9-mipsbe-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral4
Sample
gdbgo.sh
Resource
debian9-mipsel-20260513-en
2 signatures
150 seconds
General
- Target gdbgo.sh
- Size 605B
- Sample261107-phyeeabx4z
- SHA256 568b8febcab200adb7242c79a4c794761f21524e9ff54be5f8ea63cd00bd2ff8
- MD5 60f0895860da9dce8a835d9380bb4ac4
- SHA1 25fd8f9b2dc2923840a7d84607521fdb56a82727
- SHA512 20c891bc87567c0ba8431f44e61ca87fd618f8a49bbd676a20bd5e23f345acfc085d4c191085b910ee13da31f18abd41a03a887eb1307bd2be87887af216bcff
- TLSH T174F0AC371090E53D9183DFA3DC92E116A47622CF1AEBB680F8A1B249852CA6A3003229
- MD5 SHA1 SHA512 TLSH
Score
6/10
Malware Config
Signatures
- Abuse Elevation Control Mechanism: Sudo and Sudo Caching 1 TTPs 3 IoCs
Abuse sudo or cached sudo credentials to execute code.
pid Process 746 env 746