General

  • Target

    5a2f51c565caf83d73e724ec8f08c7120877abcd832895d9f96eb0f73f47c629

  • Size

    8.2MB

  • MD5

    a5be28cd74bef6fff3087ab2cf2ab1e4

  • SHA1

    5df0d9e0f6b236e45dbabfad3bf229455f20f809

  • SHA256

    5a2f51c565caf83d73e724ec8f08c7120877abcd832895d9f96eb0f73f47c629

  • SHA512

    6d348a1b7e50377763fa63b0436bfec6cda5a1f5d819369e7677347bac326f6c0a9f3029ebddbdd39255fef066d4067c0eeacb0fa53362804d71b0ac734bd1d6

  • SSDEEP

    196608:SWCuT1DmvuY3nXgQveLZ6w1fQFwSIg9hh1Dd7lGSpOUI:iuT1DmvuY3XoFOFOIN7lzFI

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

Files

  • 5a2f51c565caf83d73e724ec8f08c7120877abcd832895d9f96eb0f73f47c629
    .zip
  • bin/cpu_limit.sh
    .sh linux
  • bin/hr_agent
    .elf linux x64
  • bin/hra_test
    .elf linux x64
  • bin/scanmanager/nmap-mac-prefixes
  • bin/scanmanager/nmap-os-db
  • bin/scanmanager/nmap-protocols
  • bin/scanmanager/nmap-service-probes
  • bin/scanmanager/nmap-services
  • bin/scanmanager/nse_main.lua
    .js
  • bin/scanmanager/nselib/netbios.lua
    .js
  • bin/scanmanager/nselib/stdnse.lua
    .js
  • bin/scanmanager/scanmanager
    .elf linux x64
  • bin/scanmanager/scripts/nbstat.nse
    .js
  • docs/version.ini
  • integrated/HraApi.h
  • integrated/libhraapi.so.1.0.6
    .elf linux x64
  • lib/libappscan.so
    .elf linux x64
  • lib/libassets.so
    .elf linux x64
  • lib/libbaseline.so
    .elf linux x64
  • lib/libcommon.so
    .elf linux x64
  • lib/libconfigsave.so
    .elf linux x64
  • lib/libcrypto.so.10
    .elf linux x64
  • lib/libcurl.so.4
    .elf linux x64
  • lib/libhiredis.so.1.1.0
    .elf linux x64
  • lib/libhostdiscovery.so
    .elf linux x64
  • lib/libjsoncpp.so.1
    .elf linux x64
  • lib/liblber-2.4.so.2
    .elf linux x64
  • lib/libldap-2.4.so.2
    .elf linux x64
  • lib/libluaengine.so
    .elf linux x64
  • lib/libminizip.so
    .elf linux x64
  • lib/libmysqlclient.so.18
    .elf linux x64
  • lib/libosscan.so
    .elf linux x64
  • lib/libpatterncypher.so
    .elf linux x64
  • lib/libpq.so.5
    .elf linux x64
  • lib/libsasl2.so.2
    .elf linux x64
  • lib/libsqlite3.so.0
    .elf linux x64
  • lib/libssl.so.10
    .elf linux x64
  • lib/libupdatepattern.so
    .elf linux x64
  • lib/libvaeng.so
    .elf linux x64
  • lib/libvulnpoc.so
    .elf linux x64
  • lib/libwpscan.so
    .elf linux x64
  • lib/libxml2.so.2
    .elf linux x64
  • lib/libz.so.1
    .elf linux x64
  • test/appscan.json
  • test/assets.json
  • test/baseline.json
  • test/baseline_p-b2.zip
    .zip
  • data/blp$1000.0001
  • data/centos6$1000.0001
    .zip
  • CentOS6/checkAm.sh
  • CentOS6/checkAuditdAndRsyslog.sh
  • CentOS6/checkDpi.sh
  • CentOS6/checkEtcChownAndChmod.sh
  • CentOS6/checkHomeDirAndSshKey.sh
  • CentOS6/checkLogProtect.sh
  • CentOS6/closeSharing.sh
  • CentOS6/default.sh
  • CentOS6/defaultAccount.sh
  • CentOS6/deleteExtraAccount.sh
  • CentOS6/enableSecurityCheck.sh
  • CentOS6/loginAccountVerify.sh
  • CentOS6/loginFailureHandle.sh
  • CentOS6/remoteInfoProtect.sh
  • CentOS6/removeUnnecessarySoftware.sh
  • CentOS6/terminalNetRestriction.sh
  • CentOS6/userAccessControl.sh
  • CentOS6/userMinAuthority.sh
  • data/centos7$1000.0001
    .zip
  • CentOS7/checkAm.sh
  • CentOS7/checkAuditdAndRsyslog.sh
  • CentOS7/checkDpi.sh
  • CentOS7/checkEtcChownAndChmod.sh
  • CentOS7/checkHomeDirAndSshKey.sh
  • CentOS7/checkLogProtect.sh
  • CentOS7/closeSharing.sh
  • CentOS7/default.sh
  • CentOS7/defaultAccount.sh
  • CentOS7/deleteExtraAccount.sh
  • CentOS7/enableSecurityCheck.sh
  • CentOS7/loginAccountVerify.sh
  • CentOS7/loginFailureHandle.sh
  • CentOS7/remoteInfoProtect.sh
  • CentOS7/removeUnnecessarySoftware.sh
  • CentOS7/terminalNetRestriction.sh
  • CentOS7/userAccessControl.sh
  • CentOS7/userMinAuthority.sh
  • data/centos8$1000.0001
    .zip
  • CentOS8/checkAm.sh
  • CentOS8/checkAuditdAndRsyslog.sh
  • CentOS8/checkDpi.sh
  • CentOS8/checkEtcChownAndChmod.sh
  • CentOS8/checkHomeDirAndSshKey.sh
  • CentOS8/checkLogProtect.sh
  • CentOS8/closeSharing.sh
  • CentOS8/default.sh
  • CentOS8/defaultAccount.sh
  • CentOS8/deleteExtraAccount.sh
  • CentOS8/enableSecurityCheck.sh
  • CentOS8/loginAccountVerify.sh
  • CentOS8/loginFailureHandle.sh
  • CentOS8/remoteInfoProtect.sh
  • CentOS8/removeUnnecessarySoftware.sh
  • CentOS8/terminalNetRestriction.sh
  • CentOS8/userAccessControl.sh
  • CentOS8/userMinAuthority.sh
  • data/redhat6$1000.0001
    .zip
  • RedHat6/checkAm.sh
  • RedHat6/checkAuditdAndRsyslog.sh
  • RedHat6/checkDpi.sh
  • RedHat6/checkEtcChownAndChmod.sh
  • RedHat6/checkHomeDirAndSshKey.sh
  • RedHat6/checkLogProtect.sh
  • RedHat6/closeSharing.sh
  • RedHat6/default.sh
  • RedHat6/defaultAccount.sh
  • RedHat6/deleteExtraAccount.sh
  • RedHat6/enableSecurityCheck.sh
  • RedHat6/loginAccountVerify.sh
  • RedHat6/loginFailureHandle.sh
  • RedHat6/remoteInfoProtect.sh
  • RedHat6/removeUnnecessarySoftware.sh
  • RedHat6/terminalNetRestriction.sh
  • RedHat6/userAccessControl.sh
  • RedHat6/userMinAuthority.sh
  • data/redhat7$1000.0001
    .zip
  • RedHat7/checkAm.sh
  • RedHat7/checkAuditdAndRsyslog.sh
  • RedHat7/checkDpi.sh
  • RedHat7/checkEtcChownAndChmod.sh
  • RedHat7/checkHomeDirAndSshKey.sh
  • RedHat7/checkLogProtect.sh
  • RedHat7/closeSharing.sh
  • RedHat7/default.sh
  • RedHat7/defaultAccount.sh
  • RedHat7/deleteExtraAccount.sh
  • RedHat7/enableSecurityCheck.sh
  • RedHat7/loginAccountVerify.sh
  • RedHat7/loginFailureHandle.sh
  • RedHat7/remoteInfoProtect.sh
  • RedHat7/removeUnnecessarySoftware.sh
  • RedHat7/terminalNetRestriction.sh
  • RedHat7/userAccessControl.sh
  • RedHat7/userMinAuthority.sh
  • data/redhat8$1000.0001
    .zip
  • RedHat8/checkAm.sh
  • RedHat8/checkAuditdAndRsyslog.sh
  • RedHat8/checkDpi.sh
  • RedHat8/checkEtcChownAndChmod.sh
  • RedHat8/checkHomeDirAndSshKey.sh
  • RedHat8/checkLogProtect.sh
  • RedHat8/closeSharing.sh
  • RedHat8/default.sh
  • RedHat8/defaultAccount.sh
  • RedHat8/deleteExtraAccount.sh
  • RedHat8/enableSecurityCheck.sh
  • RedHat8/loginAccountVerify.sh
  • RedHat8/loginFailureHandle.sh
  • RedHat8/remoteInfoProtect.sh
  • RedHat8/removeUnnecessarySoftware.sh
  • RedHat8/terminalNetRestriction.sh
  • RedHat8/userAccessControl.sh
  • RedHat8/userMinAuthority.sh
  • meta_info.json
  • test/cancel.json
  • test/hostdiscovery-cancel.json
  • test/hostdiscovery-default-scan-range.json
  • test/hostdiscovery-specify-scan-range.json
  • test/input01.json
  • test/osscan.json
  • test/patternUpdateCmd.json
  • test/reg.json
  • test/vuln_app_p-b2.zip
    .zip
  • data/ccp$1000.0001
  • meta_info.json
  • test/vuln_os_p-b2.zip
    .zip
  • test/vulnpoc.json
  • test/wpscan.json