dota3[.]tar[.]gz | Triage

Submit
Reports

Overview

overview

9

Static

static

dota3.tar.gz

windows7-x64

3

dota3.tar.gz

windows10-2004-x64

3

.rsync/a/a

ubuntu-18.04-amd64

1

.rsync/a/a

debian-9-armhf

9

.rsync/a/a

debian-9-mips

9

.rsync/a/a

debian-9-mipsel

9

.rsync/a/init0

ubuntu-18.04-amd64

9

.rsync/a/init0

debian-9-armhf

9

.rsync/a/init0

debian-9-mips

9

.rsync/a/init0

debian-9-mipsel

9

.rsync/a/kswapd0

ubuntu-18.04-amd64

9

.rsync/a/run

ubuntu-18.04-amd64

5

.rsync/a/run

debian-9-armhf

5

.rsync/a/run

debian-9-mips

5

.rsync/a/run

debian-9-mipsel

5

.rsync/a/stop

ubuntu-18.04-amd64

1

.rsync/a/stop

debian-9-armhf

6

.rsync/a/stop

debian-9-mips

6

.rsync/a/stop

debian-9-mipsel

6

.rsync/a/tors/bin/tor

ubuntu-18.04-amd64

1

.rsync/a/t...encert

ubuntu-18.04-amd64

1

.rsync/a/t...g-cert

ubuntu-18.04-amd64

1

.rsync/a/t...esolve

ubuntu-18.04-amd64

1

.rsync/a/t...irs.sh

ubuntu-18.04-amd64

7

.rsync/a/t...irs.sh

debian-9-armhf

7

.rsync/a/t...irs.sh

debian-9-mips

7

.rsync/a/t...irs.sh

debian-9-mipsel

7

.rsync/a/t...art.sh

ubuntu-18.04-amd64

7

.rsync/a/t...art.sh

debian-9-armhf

7

.rsync/a/t...art.sh

debian-9-mips

7

.rsync/a/t...art.sh

debian-9-mipsel

7

.rsync/a/tors/stop.sh

ubuntu-18.04-amd64

7

Sharing

Static task

static1

Behavioral task

behavioral1

Sample

dota3.tar.gz

Resource

win7-20221111-en

windows7-x64

5 signatures

150 seconds

Behavioral task

behavioral2

Sample

dota3.tar.gz

Resource

win10v2004-20221111-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral3

Sample

.rsync/a/a

Resource

ubuntu1804-amd64-20221111-en

ubuntu-18.04-amd64

0 signatures

150 seconds

Behavioral task

behavioral4

Sample

.rsync/a/a

Resource

debian9-armhf-20221111-en

debian-9-armhf

5 signatures

150 seconds

Behavioral task

behavioral5

Sample

.rsync/a/a

Resource

debian9-mipsbe-en-20211208

debian-9-mips

5 signatures

150 seconds

Behavioral task

behavioral6

Sample

.rsync/a/a

Resource

debian9-mipsel-20221111-en

debian-9-mipsel

5 signatures

150 seconds

Behavioral task

behavioral7

Sample

.rsync/a/init0

Resource

ubuntu1804-amd64-en-20211208

ubuntu-18.04-amd64

4 signatures

150 seconds

Behavioral task

behavioral8

Sample

.rsync/a/init0

Resource

debian9-armhf-20221111-en

debian-9-armhf

4 signatures

150 seconds

Behavioral task

behavioral9

Sample

.rsync/a/init0

Resource

debian9-mipsbe-en-20211208

debian-9-mips

4 signatures

150 seconds

Behavioral task

behavioral10

Sample

.rsync/a/init0

Resource

debian9-mipsel-20221111-en

debian-9-mipsel

4 signatures

150 seconds

Behavioral task

behavioral11

Sample

.rsync/a/kswapd0

Resource

ubuntu1804-amd64-en-20211208

ubuntu-18.04-amd64

5 signatures

150 seconds

Behavioral task

behavioral12

Sample

.rsync/a/run

Resource

ubuntu1804-amd64-20221111-en

ubuntu-18.04-amd64

2 signatures

150 seconds

Behavioral task

behavioral13

Sample

.rsync/a/run

Resource

debian9-armhf-en-20211208

debian-9-armhf

2 signatures

150 seconds

Behavioral task

behavioral14

Sample

.rsync/a/run

Resource

debian9-mipsbe-20221111-en

debian-9-mips

2 signatures

150 seconds

Behavioral task

behavioral15

Sample

.rsync/a/run

Resource

debian9-mipsel-en-20211208

debian-9-mipsel

2 signatures

150 seconds

Behavioral task

behavioral16

Sample

.rsync/a/stop

Resource

ubuntu1804-amd64-20221111-en

ubuntu-18.04-amd64

0 signatures

150 seconds

Behavioral task

behavioral17

Sample

.rsync/a/stop

Resource

debian9-armhf-en-20211208

debian-9-armhf

3 signatures

150 seconds

Behavioral task

behavioral18

Sample

.rsync/a/stop

Resource

debian9-mipsbe-20221111-en

debian-9-mips

3 signatures

150 seconds

Behavioral task

behavioral19

Sample

.rsync/a/stop

Resource

debian9-mipsel-en-20211208

debian-9-mipsel

3 signatures

150 seconds

Behavioral task

behavioral20

Sample

.rsync/a/tors/bin/tor

Resource

ubuntu1804-amd64-20221111-en

ubuntu-18.04-amd64

0 signatures

150 seconds

Behavioral task

behavioral21

Sample

.rsync/a/tors/bin/tor-gencert

Resource

ubuntu1804-amd64-en-20211208

ubuntu-18.04-amd64

0 signatures

150 seconds

Behavioral task

behavioral22

Sample

.rsync/a/tors/bin/tor-print-ed-signing-cert

Resource

ubuntu1804-amd64-en-20211208

ubuntu-18.04-amd64

0 signatures

150 seconds

Behavioral task

behavioral23

Sample

.rsync/a/tors/bin/tor-resolve

Resource

ubuntu1804-amd64-20221111-en

ubuntu-18.04-amd64

0 signatures

150 seconds

Behavioral task

behavioral24

Sample

.rsync/a/tors/cleandirs.sh

Resource

ubuntu1804-amd64-20221111-en

ubuntu-18.04-amd64

2 signatures

150 seconds

Behavioral task

behavioral25

Sample

.rsync/a/tors/cleandirs.sh

Resource

debian9-armhf-20221111-en

debian-9-armhf

2 signatures

150 seconds

Behavioral task

behavioral26

Sample

.rsync/a/tors/cleandirs.sh

Resource

debian9-mipsbe-20221111-en

debian-9-mips

2 signatures

150 seconds

Behavioral task

behavioral27

Sample

.rsync/a/tors/cleandirs.sh

Resource

debian9-mipsel-20221111-en

debian-9-mipsel

2 signatures

150 seconds

Behavioral task

behavioral28

Sample

.rsync/a/tors/start.sh

Resource

ubuntu1804-amd64-20221111-en

ubuntu-18.04-amd64

3 signatures

150 seconds

Behavioral task

behavioral29

Sample

.rsync/a/tors/start.sh

Resource

debian9-armhf-en-20211208

debian-9-armhf

3 signatures

150 seconds

Behavioral task

behavioral30

Sample

.rsync/a/tors/start.sh

Resource

debian9-mipsbe-20221111-en

debian-9-mips

3 signatures

150 seconds

Behavioral task

behavioral31

Sample

.rsync/a/tors/start.sh

Resource

debian9-mipsel-en-20211208

debian-9-mipsel

3 signatures

150 seconds

Behavioral task

behavioral32

Sample

.rsync/a/tors/stop.sh

Resource

ubuntu1804-amd64-20221111-en

ubuntu-18.04-amd64

3 signatures

150 seconds

General

Target

dota3.tar.gz
Size

9.3MB
MD5

96f9d734c3cfdacceca70187cbc549b7
SHA1

73e5dbafa25946ed636e68d1733281e63332441d
SHA256

170e3e987e99867d8b4115b4a2d9dea074acb56383744d469a28c5611adeba22
SHA512

229f9f4ff6fd4b25cb1fc40410ecd6d1a0091c0bbf8034e831b2be270087b63de4a79875fb2b790aff0db7f0fad63bb0ca88c6752cc7ab01d3c0ad39bcd26823
SSDEEP

196608:nsTz1geKvCVOQumWVFExoGZyUBDNjLyYyQUN29VEqbGmwW1ELyE+IGiZhd+P6vvQ:nIpLKvOOQDWVL+eYyQO29VHwWeJhw6v4

Score

N/A

Malware Config

Signatures

Files

dota3.tar.gz
.gz
sample
.tar
.rsync/a/a
.sh linux
.rsync/a/init0
.sh linux
.rsync/a/kswapd0
.elf linux x64
.rsync/a/run
.sh linux
.rsync/a/stop
.sh linux
.rsync/a/tors/bin/tor
.elf linux x86
.rsync/a/tors/bin/tor-gencert
.elf linux x86
.rsync/a/tors/bin/tor-print-ed-signing-cert
.elf linux x86
.rsync/a/tors/bin/tor-resolve
.elf linux x86
.rsync/a/tors/bin/torify
.rsync/a/tors/cleandirs.sh
.sh linux
.rsync/a/tors/share/tor/geoip
.rsync/a/tors/share/tor/geoip6
.rsync/a/tors/start.sh
.sh .js linux
.rsync/a/tors/stop.sh
.sh linux
.rsync/b/a
.sh linux
.rsync/b/run
.sh linux
.rsync/b/stop
.sh linux
.rsync/c/blitz
.sh linux
.rsync/c/blitz32
.elf linux x86
.rsync/c/blitz64
.elf linux x64
.rsync/c/c
.rsync/c/d
.rsync/c/go
.sh .js linux
.rsync/c/golan
.sh linux
.rsync/c/run
.sh linux
.rsync/c/slow
.sh linux
.rsync/c/start
.sh linux
.rsync/c/stop
.sh linux
.rsync/c/watchdog
.sh linux
.rsync/init
.rsync/init0
.rsync/init2
.rsync/initall

© 2018-2025

Terms | Privacy