Overview

overview

7

Static

static

3

Cmder.exe

windows10-2004-x64

3

Cmder.exe

windows11-ltsc_2024-x64

3

vendor/bin/alias.cmd

windows10-2004-x64

3

vendor/bin/alias.cmd

windows11-ltsc_2024-x64

3

vendor/bin/cexec.cmd

windows10-2004-x64

3

vendor/bin/cexec.cmd

windows11-ltsc_2024-x64

3

vendor/bin...ag.cmd

windows10-2004-x64

7

vendor/bin...ag.cmd

windows11-ltsc_2024-x64

7

vendor/bin...ag.ps1

windows10-2004-x64

3

vendor/bin...ag.ps1

windows11-ltsc_2024-x64

3

vendor/bin...iag.sh

ubuntu-18.04-amd64

3

vendor/bin...iag.sh

debian-9-armhf

3

vendor/bin...iag.sh

debian-9-mips

3

vendor/bin...iag.sh

debian-9-mipsel

3

vendor/bin...ll.cmd

windows10-2004-x64

3

vendor/bin...ll.cmd

windows11-ltsc_2024-x64

3

vendor/bin/excd.cmd

windows10-2004-x64

3

vendor/bin/excd.cmd

windows11-ltsc_2024-x64

3

vendor/bin/timer.cmd

windows10-2004-x64

3

vendor/bin/timer.cmd

windows11-ltsc_2024-x64

3

vendor/bin...it.cmd

windows10-2004-x64

3

vendor/bin...it.cmd

windows11-ltsc_2024-x64

3

vendor/bin...md.vbs

windows10-2004-x64

5

vendor/bin...md.vbs

windows11-ltsc_2024-x64

5

vendor/cli...tey.js

windows10-2004-x64

3

vendor/cli...tey.js

windows11-ltsc_2024-x64

3

vendor/cli...ds.bat

windows10-2004-x64

3

vendor/cli...ds.bat

windows11-ltsc_2024-x64

3

vendor/cli...at.bat

windows10-2004-x64

3

vendor/cli...at.bat

windows11-ltsc_2024-x64

3

vendor/cli...ta.bat

windows10-2004-x64

3

vendor/cli...ta.bat

windows11-ltsc_2024-x64

3

Analysis

  • max time kernel
    0s
  • max time network
    132s
  • platform
    ubuntu-18.04_amd64
  • resource
    ubuntu1804-amd64-20261019-en
  • resource tags

    arch:amd64arch:i386image:ubuntu1804-amd64-20261019-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system
  • submitted
    10/11/2026, 12:26

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    vendor/bin/cmder_diag.sh
  • Size 1KB
  • Sample261110-pl98dattey
  • SHA256 d588472ce6259c53f7bd19fb06dfddddbbd9fac09c1415ca2d64cdb5bd44c88c
  • MD5 SHA1 SHA512 TLSH
Score
3/10
discovery

Malware Config

Signatures

  • Reads runtime system information 4 IoCs

    Reads data from /proc virtual filesystem.

    discovery

Processes

  • /tmp/vendor/bin/cmder_diag.sh
    /tmp/vendor/bin/cmder_diag.sh
    1⤵
      PID:1528
    • /usr/local/sbin/bash
      bash /tmp/vendor/bin/cmder_diag.sh
      1⤵
        PID:1528
      • /usr/local/bin/bash
        bash /tmp/vendor/bin/cmder_diag.sh
        1⤵
          PID:1528
        • /usr/sbin/bash
          bash /tmp/vendor/bin/cmder_diag.sh
          1⤵
            PID:1528
          • /usr/bin/bash
            bash /tmp/vendor/bin/cmder_diag.sh
            1⤵
              PID:1528
            • /sbin/bash
              bash /tmp/vendor/bin/cmder_diag.sh
              1⤵
                PID:1528
              • /bin/bash
                bash /tmp/vendor/bin/cmder_diag.sh
                1⤵
                  PID:1528
                  • /usr/bin/env
                    env
                    2⤵
                      PID:1530
                    • /usr/bin/which
                      which git
                      2⤵
                        PID:1531
                      • /usr/bin/which
                        which clink
                        2⤵
                          PID:1532
                        • /bin/ls
                          ls -la
                          2⤵
                          • Reads runtime system information
                          PID:1534
                        • /bin/ls
                          ls -la /vendor
                          2⤵
                          • Reads runtime system information
                          PID:1535
                        • /bin/ls
                          ls -laR /s /bin
                          2⤵
                          • Reads runtime system information
                          PID:1536
                        • /bin/ls
                          ls -laR /s /config
                          2⤵
                          • Reads runtime system information
                          PID:1537
                        • /bin/cat
                          cat /cmder_diag_sh.log
                          2⤵
                            PID:1538

                        Network

                              MITRE ATT&CK Matrix

                              Replay Monitor

                              Loading Replay Monitor...

                              Downloads

                              cmder_diag_sh.log
                              • Path /cmder_diag_sh.log
                              • Size 370B
                              • SHA256 a4a112a3fa80db3ec0e72cfa8eb595c1d3f7a8840d540970d01936737204fb30
                              • MD5 SHA1 SHA512 TLSH
                              Submit Download

                              cmder_diag_sh.log
                              • Path /cmder_diag_sh.log
                              • Size 828B
                              • SHA256 691c0b322e5e5e2b5bc14c3684f9684b310288eed79bd9df4657e21a3145f51a
                              • MD5 SHA1 SHA512 TLSH
                              Submit Download

                              cmder_diag_sh.log
                              • Path /cmder_diag_sh.log
                              • Size 973B
                              • SHA256 05f931609eee59a6055930e6a40bf668c9b3bb5b8b7797b29bb92366cc78dc30
                              • MD5 SHA1 SHA512 TLSH
                              Submit Download

                              cmder_diag_sh.log
                              • Path /cmder_diag_sh.log
                              • Size 9KB
                              • SHA256 fa3832fd25b055e30d81963138348e1b4f3c99effdcd0d3f7017aa8515ccad3d
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              cmder_diag_sh.log
                              • Path /cmder_diag_sh.log
                              • Size 10KB
                              • SHA256 449ca58c22ac3403ca42862dfff7454fe5559d251a5aa9ca7ebf42d1c9c1288f
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download