Overview

overview

7

Static

static

7

Linux-V3.2...mit.sh

ubuntu-18.04-amd64

1

Linux-V3.2...mit.sh

debian-9-armhf

1

Linux-V3.2...mit.sh

debian-9-mips

1

Linux-V3.2...mit.sh

debian-9-mipsel

1

Linux-V3.2..._agent

ubuntu-18.04-amd64

3

Linux-V3.2...a_test

ubuntu-18.04-amd64

Linux-V3.2...ain.js

windows7-x64

1

Linux-V3.2...ain.js

windows10-2004-x64

1

Linux-V3.2...ios.js

windows7-x64

1

Linux-V3.2...ios.js

windows10-2004-x64

1

Linux-V3.2...nse.js

windows7-x64

1

Linux-V3.2...nse.js

windows10-2004-x64

1

Linux-V3.2...anager

ubuntu-18.04-amd64

3

Linux-V3.2...tat.js

windows7-x64

1

Linux-V3.2...tat.js

windows10-2004-x64

1

Linux-V3.2....1.0.6

ubuntu-18.04-amd64

Linux-V3.2...can.so

ubuntu-18.04-amd64

1

Linux-V3.2...ets.so

ubuntu-18.04-amd64

1

Linux-V3.2...ine.so

ubuntu-18.04-amd64

Linux-V3.2...mon.so

ubuntu-18.04-amd64

1

Linux-V3.2...ave.so

ubuntu-18.04-amd64

Linux-V3.2....so.10

ubuntu-18.04-amd64

1

Linux-V3.2...l.so.4

ubuntu-18.04-amd64

1

Linux-V3.2....1.1.0

ubuntu-18.04-amd64

1

Linux-V3.2...ery.so

ubuntu-18.04-amd64

1

Linux-V3.2...p.so.1

ubuntu-18.04-amd64

1

Linux-V3.2...4.so.2

ubuntu-18.04-amd64

1

Linux-V3.2...4.so.2

ubuntu-18.04-amd64

1

Linux-V3.2...ine.so

ubuntu-18.04-amd64

1

Linux-V3.2...zip.so

ubuntu-18.04-amd64

1

Linux-V3.2....so.18

ubuntu-18.04-amd64

1

Linux-V3.2...can.so

ubuntu-18.04-amd64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    6a9e549d8e8b79a1c115af5d14947dfcc2bc48287db5b8682208d670a8d5c17e

  • Size

    13.7MB

  • MD5

    76529b2a4516351fb642d30a47191448

  • SHA1

    c1623a1c542de06f66ee1e30f903a1fbad05ba56

  • SHA256

    6a9e549d8e8b79a1c115af5d14947dfcc2bc48287db5b8682208d670a8d5c17e

  • SHA512

    360b9b01f1b49dae3105f0dfb3a840a287a4d10ed93a244d209668278874625f26c411c5ce17dab04cbf6468fc0980614085cba7afa39ead31abfe4e05b905ed

  • SSDEEP

    393216:/QT1DbvuH3nWqHKOI4wUzCXfuDI4ixeA8A:/QxDTkXcOI2Sw8My

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx

Files

  • 6a9e549d8e8b79a1c115af5d14947dfcc2bc48287db5b8682208d670a8d5c17e
    .zip
  • Linux-V3.2.0-10.x86_64/bin/cpu_limit.sh
    .sh linux
  • Linux-V3.2.0-10.x86_64/bin/hr_agent
    .elf linux x64
  • Linux-V3.2.0-10.x86_64/bin/hra_test
    .elf linux x64
  • Linux-V3.2.0-10.x86_64/bin/scanmanager/nmap-mac-prefixes
  • Linux-V3.2.0-10.x86_64/bin/scanmanager/nmap-os-db
  • Linux-V3.2.0-10.x86_64/bin/scanmanager/nmap-protocols
  • Linux-V3.2.0-10.x86_64/bin/scanmanager/nmap-service-probes
  • Linux-V3.2.0-10.x86_64/bin/scanmanager/nmap-services
  • Linux-V3.2.0-10.x86_64/bin/scanmanager/nse_main.lua
    .js
  • Linux-V3.2.0-10.x86_64/bin/scanmanager/nselib/netbios.lua
    .js
  • Linux-V3.2.0-10.x86_64/bin/scanmanager/nselib/stdnse.lua
    .js
  • Linux-V3.2.0-10.x86_64/bin/scanmanager/scanmanager
    .elf linux x64
  • Linux-V3.2.0-10.x86_64/bin/scanmanager/scripts/nbstat.nse
    .js
  • Linux-V3.2.0-10.x86_64/docs/version.ini
  • Linux-V3.2.0-10.x86_64/integrated/HraApi.h
  • Linux-V3.2.0-10.x86_64/integrated/libhraapi.so.1.0.6
    .elf linux x64
  • Linux-V3.2.0-10.x86_64/lib/libappscan.so
    .elf linux x64
  • Linux-V3.2.0-10.x86_64/lib/libassets.so
    .elf linux x64
  • Linux-V3.2.0-10.x86_64/lib/libbaseline.so
    .elf linux x64
  • Linux-V3.2.0-10.x86_64/lib/libcommon.so
    .elf linux x64
  • Linux-V3.2.0-10.x86_64/lib/libconfigsave.so
    .elf linux x64
  • Linux-V3.2.0-10.x86_64/lib/libcrypto.so.10
    .elf linux x64
  • Linux-V3.2.0-10.x86_64/lib/libcurl.so.4
    .elf linux x64
  • Linux-V3.2.0-10.x86_64/lib/libhiredis.so.1.1.0
    .elf linux x64
  • Linux-V3.2.0-10.x86_64/lib/libhostdiscovery.so
    .elf linux x64
  • Linux-V3.2.0-10.x86_64/lib/libjsoncpp.so.1
    .elf linux x64
  • Linux-V3.2.0-10.x86_64/lib/liblber-2.4.so.2
    .elf linux x64
  • Linux-V3.2.0-10.x86_64/lib/libldap-2.4.so.2
    .elf linux x64
  • Linux-V3.2.0-10.x86_64/lib/libluaengine.so
    .elf linux x64
  • Linux-V3.2.0-10.x86_64/lib/libminizip.so
    .elf linux x64
  • Linux-V3.2.0-10.x86_64/lib/libmysqlclient.so.18
    .elf linux x64
  • Linux-V3.2.0-10.x86_64/lib/libosscan.so
    .elf linux x64
  • Linux-V3.2.0-10.x86_64/lib/libpatterncypher.so
    .elf linux x64
  • Linux-V3.2.0-10.x86_64/lib/libpq.so.5
    .elf linux x64
  • Linux-V3.2.0-10.x86_64/lib/libsasl2.so.2
    .elf linux x64
  • Linux-V3.2.0-10.x86_64/lib/libsqlite3.so.0
    .elf linux x64
  • Linux-V3.2.0-10.x86_64/lib/libssl.so.10
    .elf linux x64
  • Linux-V3.2.0-10.x86_64/lib/libupdatepattern.so
    .elf linux x64
  • Linux-V3.2.0-10.x86_64/lib/libvaeng.so
    .elf linux x64
  • Linux-V3.2.0-10.x86_64/lib/libvulnpoc.so
    .elf linux x64
  • Linux-V3.2.0-10.x86_64/lib/libwpscan.so
    .elf linux x64
  • Linux-V3.2.0-10.x86_64/lib/libxml2.so.2
    .elf linux x64
  • Linux-V3.2.0-10.x86_64/lib/libz.so.1
    .elf linux x64
  • Linux-V3.2.0-10.x86_64/patterns/appscan/vuln_soft_p-b1.zip
    .zip
  • data/ccp$27
  • meta_info.json
  • Linux-V3.2.0-10.x86_64/patterns/baseline/baseline_p-b1.zip
    .zip
  • data/CIScheckAvahiNotInstalled$106
  • data/CIScheckCUPSNotInstalled$106
  • data/CIScheckCronDailyPermissionsConfig$106
  • data/CIScheckCronHourlyPermissionsConfig$106
  • data/CIScheckCronMonthlyPermissionsConfig$106
  • data/CIScheckCronWeeklyPermissionsConfig$106
  • data/CIScheckCrondPermissionsConfig$106
  • data/CIScheckCrontabPermissionsConfig$106
  • data/CIScheckDHCPNotInstalled$106
  • data/CIScheckDNSNotInstalled$106
  • data/CIScheckEmptyPasswd$106
  • data/CIScheckFTPNotInstalled$106
  • data/CIScheckGroup-PermissionsConfig$106
  • data/CIScheckGroupPermissionsConfig$106
  • data/CIScheckGroupsLegal$106
  • data/CIScheckHTTPNotInstalled$106
  • data/CIScheckHTTPProxyServerNotInstalled$106
  • data/CIScheckIMAP&POP3NotInstalled$106
  • data/CIScheckInactivePasswdLockTime$106
  • data/CIScheckLDAPClientNotInstalled$106
  • data/CIScheckLDAPNotInstalled$106
  • data/CIScheckNetSnmpNotInstalled$106
  • data/CIScheckPasswd-PermissionsConfig$106
  • data/CIScheckPasswdChangeDeadline$106
  • data/CIScheckPasswdComplexityConfig$106
  • data/CIScheckPasswdExpirationWarningDays$106
  • data/CIScheckPasswdLockout$106
  • data/CIScheckPasswdPermissionsConfig$106
  • data/CIScheckPasswdReuse$106
  • data/CIScheckPasswdValidityPeriod$106
  • data/CIScheckRootUID$106
  • data/CIScheckRsyncNotInstalled$106
  • data/CIScheckRsyslogEnabledAndRunning$106
  • data/CIScheckRsyslogFilePermissionsConfig$106
  • data/CIScheckRsyslogNotInstalled$106
  • data/CIScheckSambaNotInstalled$106
  • data/CIScheckShadow-PermissionsConfig$106
  • data/CIScheckShadowPermissionsConfig$106
  • data/CIScheckSuConfig$106
  • data/CIScheckTelnetClientNotInstalled$106
  • data/CIScheckUniqueGID$106
  • data/CIScheckUniqueUID$106
  • data/CIScheckUniqueUsername$106
  • data/CIScheckUserHomeDir$106
  • data/CIScheckUserUmask$106
  • data/CIScheckX11ServerNotInstall$106
  • data/CISchecksshAccessLimit$106
  • data/CISchecksshEmptyPasswd$106
  • data/CISchecksshHostbaseddisabled$106
  • data/CISchecksshIgnoreRhosts$106
  • data/CISchecksshLogLevel$106
  • data/CISchecksshLoginGraceTime$106
  • data/CISchecksshMaxAuth$106
  • data/CISchecksshPermitUserEnv$106
  • data/CISchecksshTimeout$106
  • data/CISchecksshWarningConfig$106
  • data/CISchecksshX11Disabled$106
  • data/CISchecksshd_configPermissionsConfig$106
  • data/CISchecksshrootlogindisabled$106
  • data/CheckWeakPwd.sh
  • data/accessControlCN.sh
  • data/accountLimitCW.sh
  • data/amznlinux2$106
    .zip
  • AmznLinux2/checkAm.sh
  • AmznLinux2/checkAuditdAndRsyslog.sh
  • AmznLinux2/checkDpi.sh
  • AmznLinux2/checkEtcChownAndChmod.sh
  • AmznLinux2/checkHomeDirAndSshKey.sh
  • AmznLinux2/checkLogProtect.sh
  • AmznLinux2/closeSharing.sh
  • AmznLinux2/default.sh
  • AmznLinux2/defaultAccount.sh
  • AmznLinux2/deleteExtraAccount.sh
  • AmznLinux2/enableSecurityCheck.sh
  • AmznLinux2/loginAccountVerify.sh
  • AmznLinux2/loginFailureHandle.sh
  • AmznLinux2/remoteInfoProtect.sh
  • AmznLinux2/removeUnnecessarySoftware.sh
  • AmznLinux2/terminalNetRestriction.sh
  • AmznLinux2/userAccessControl.sh
  • AmznLinux2/userMinAuthority.sh
  • data/anolisos7$106
    .zip
  • AnolisOS7/checkAm.sh
  • AnolisOS7/checkAuditdAndRsyslog.sh
  • AnolisOS7/checkDpi.sh
  • AnolisOS7/checkEtcChownAndChmod.sh
  • AnolisOS7/checkHomeDirAndSshKey.sh
  • AnolisOS7/checkLogProtect.sh
  • AnolisOS7/closeSharing.sh
  • AnolisOS7/default.sh
  • AnolisOS7/defaultAccount.sh
  • AnolisOS7/deleteExtraAccount.sh
  • AnolisOS7/enableSecurityCheck.sh
  • AnolisOS7/loginAccountVerify.sh
  • AnolisOS7/loginFailureHandle.sh
  • AnolisOS7/remoteInfoProtect.sh
  • AnolisOS7/removeUnnecessarySoftware.sh
  • AnolisOS7/terminalNetRestriction.sh
  • AnolisOS7/userAccessControl.sh
  • AnolisOS7/userMinAuthority.sh
  • data/anolisos8$106
    .zip
  • AnolisOS8/checkAm.sh
  • AnolisOS8/checkAuditdAndRsyslog.sh
  • AnolisOS8/checkDpi.sh
  • AnolisOS8/checkEtcChownAndChmod.sh
  • AnolisOS8/checkHomeDirAndSshKey.sh
  • AnolisOS8/checkLogProtect.sh
  • AnolisOS8/closeSharing.sh
  • AnolisOS8/default.sh
  • AnolisOS8/defaultAccount.sh
  • AnolisOS8/deleteExtraAccount.sh
  • AnolisOS8/enableSecurityCheck.sh
  • AnolisOS8/loginAccountVerify.sh
  • AnolisOS8/loginFailureHandle.sh
  • AnolisOS8/remoteInfoProtect.sh
  • AnolisOS8/removeUnnecessarySoftware.sh
  • AnolisOS8/terminalNetRestriction.sh
  • AnolisOS8/userAccessControl.sh
  • AnolisOS8/userMinAuthority.sh
  • data/apache$106
    .zip
  • Apache/checkLogLevel.sh
  • Apache/denyServiceProtect.sh
  • Apache/fileAccessControl.sh
  • Apache/infoProtect.sh
  • Apache/noRootAccount.sh
  • Apache/webSetControl.sh
  • Apache/wrongPage.sh
  • data/autoAccountExitCL.sh
  • data/autoAccountExitCT.sh
  • data/bclinux7$106
    .zip
  • BCLinux7/checkAm.sh
  • BCLinux7/checkAuditdAndRsyslog.sh
  • BCLinux7/checkDpi.sh
  • BCLinux7/checkEtcChownAndChmod.sh
  • BCLinux7/checkHomeDirAndSshKey.sh
  • BCLinux7/checkLogProtect.sh
  • BCLinux7/closeSharing.sh
  • BCLinux7/default.sh
  • BCLinux7/defaultAccount.sh
  • BCLinux7/deleteExtraAccount.sh
  • BCLinux7/enableSecurityCheck.sh
  • BCLinux7/loginAccountVerify.sh
  • BCLinux7/loginFailureHandle.sh
  • BCLinux7/remoteInfoProtect.sh
  • BCLinux7/removeUnnecessarySoftware.sh
  • BCLinux7/terminalNetRestriction.sh
  • BCLinux7/userAccessControl.sh
  • BCLinux7/userMinAuthority.sh
  • data/blp$106
  • data/centos6$106
    .zip
  • CentOS6/checkAm.sh
  • CentOS6/checkAuditdAndRsyslog.sh
  • CentOS6/checkDpi.sh
  • CentOS6/checkEtcChownAndChmod.sh
  • CentOS6/checkHomeDirAndSshKey.sh
  • CentOS6/checkLogProtect.sh
  • CentOS6/closeSharing.sh
  • CentOS6/default.sh
  • CentOS6/defaultAccount.sh
  • CentOS6/deleteExtraAccount.sh
  • CentOS6/enableSecurityCheck.sh
  • CentOS6/loginAccountVerify.sh
  • CentOS6/loginFailureHandle.sh
  • CentOS6/remoteInfoProtect.sh
  • CentOS6/removeUnnecessarySoftware.sh
  • CentOS6/terminalNetRestriction.sh
  • CentOS6/userAccessControl.sh
  • CentOS6/userMinAuthority.sh
  • data/centos7$106
    .zip
  • data/centos8$106
    .zip
  • data/centos9$106
    .zip
  • data/checkAccountCN.sh
  • data/checkAllSecurity.sh
  • data/checkAm.sh
  • data/checkAuditdAndRsyslog.sh
  • data/checkBinLogCM.sh
  • data/checkChmodCN.sh
  • data/checkClientBodyCN.sh
  • data/checkClientHeaderCN.sh
  • data/checkDirAuth.sh
  • data/checkDpi.sh
  • data/checkErrorLogCA.sh
  • data/checkErrorLogCM.sh
  • data/checkEtcChownAndChmod.sh
  • data/checkExpiredDisconnect.sh
  • data/checkGeneralLogCM.sh
  • data/checkGhostShadowAuth.sh
  • data/checkGroupAuth.sh
  • data/checkGroupAuthCL.sh
  • data/checkHomeDir.sh
  • data/checkHomeDirAndSshKey.sh
  • data/checkHostsAuth.sh
  • data/checkHttpDataCA.sh
  • data/checkHttpsDataCA.sh
  • data/checkKeepAliveCA.sh
  • data/checkKeepAliveCN.sh
  • data/checkLogFormatCA.sh
  • data/checkLogLevelCA.sh
  • data/checkLogPathCA.sh
  • data/checkLogProtect.sh
  • data/checkLoginFailure.sh
  • data/checkNoLoginUser.sh
  • data/checkPasswdAuth.sh
  • data/checkPasswdAuthCL.sh
  • data/checkPasswdComplexity.sh
  • data/checkPasswdMaxDay.sh
  • data/checkPasswdMinDay.sh
  • data/checkPasswordReuse.sh
  • data/checkPermitRootLogin.sh
  • data/checkPrivateSshKey.sh
  • data/checkProfileAuth.sh
  • data/checkProxypassCN.sh
  • data/checkPublicSshKey.sh
  • data/checkRootUID.sh
  • data/checkSSHDV2Protocol.sh
  • data/checkSSHStatusCL.sh
  • data/checkSecurityAudit.sh
  • data/checkSecurityRsyslog.sh
  • data/checkSendTimeoutCN.sh
  • data/checkSessionDisconnect.sh
  • data/checkShadowAuth.sh
  • data/checkShadowAuthCL.sh
  • data/checkSlaveUpdatesLogCM.sh
  • data/checkSlowQueryLogCM.sh
  • data/checkSshdAuth.sh
  • data/checkTelnetDisabled.sh
  • data/checkTimeOutCA.sh
  • data/checkUmask.sh
  • data/checkUserUniqueness.sh
  • data/checkVulnerability.sh
  • data/closeHighRiskPort.sh
  • data/closeIMAPService.sh
  • data/closeNFSService.sh
  • data/closeRPCService.sh
  • data/closeRSHService.sh
  • data/closeSMBService.sh
  • data/closeTALKService.sh
  • data/closeTelnetService.sh
  • data/commlinux$106
    .zip
  • data/connectionAutoExitCO.sh
  • data/custAccountLockPolicy.sh
  • data/custCheckPort.sh
  • data/custCheckPsswdLenth.sh
  • data/custCheckPsswdMaxDays.sh
  • data/custCheckPsswdMinDays.sh
  • data/custCheckPsswdPolicy.sh
  • data/custCheckRunningProcess.sh
  • data/custCheckSoftware.sh
  • data/cust_blp$106
  • data/dataTransSafeCO.sh
  • data/deaultWebCA.sh
  • data/deleteExtraAccount.sh
  • data/deleteExtraAccountCL.sh
  • data/denyFileDisplayCJ.sh
  • data/denyFileDisplayCT.sh
  • data/denyFileDisplayCW.sh
  • data/disableIndexCA.sh
  • data/fileAccessControlCA.sh
  • data/hideBannerCN.sh
  • data/infoProtectCA.sh
  • data/ipAccessControlCO.sh
  • data/jboss$106
    .zip
  • data/jmxConsoleUserCJ.sh
  • data/judgeEmptyPasswd.sh
  • data/kylin10$106
    .zip
  • data/kylin10sp1$106
    .zip
  • data/kylinsever10$106
    .zip
  • data/listenerPasswdCO.sh
  • data/loginAccountVerifyCL.sh
  • data/maxOpenSockCW.sh
  • data/minAuthorityCT.sh
  • data/multiUserControlCT.sh
  • data/mysql$106
    .zip
  • data/neokylin7$106
    .zip
  • data/netConnectionCM.sh
  • data/nginx$106
    .zip
  • data/noRootAccountCA.sh
  • data/noRootUserCW.sh
  • data/oe22$106
    .zip
  • data/oracle$106
    .zip
  • data/oracle7$106
    .zip
  • data/oracle8$106
    .zip
  • data/package/AAAConfig$106
  • data/package/Common$106
  • data/package/FileConfiguration$106
  • data/package/ServicesAndSoftware$106
  • data/passwdLimitCW.sh
  • data/redhat6$106
    .zip
  • data/redhat7$106
    .zip
  • data/redhat8$106
    .zip
  • data/redhat9$106
    .zip
  • data/regularPasswordUpdateCL.sh
  • data/remoteLoginRestrictionsCL.sh
  • data/removeAvahi.sh
  • data/removeBluez.sh
  • data/removeFirstBoot.sh
  • data/removeKdump.sh
  • data/removeNetWorkManager.sh
  • data/removeWPS.sh
  • data/removeYPBind.sh
  • data/selectSudoChange.sh
  • data/selectUserEvents.sh
  • data/string_res$106
  • data/suse12$106
    .zip
  • data/suse15$106
    .zip
  • data/terminalNetAllow.sh
  • data/terminalNetDeny.sh
  • data/tomcat$106
    .zip
  • data/ubuntu16$106
    .zip
  • data/ubuntu18$106
    .zip
  • data/ubuntu20$106
    .zip
  • data/ubuntu22$106
    .zip
  • data/uos1001c$106
    .zip
  • data/uos1020e$106
    .zip
  • data/uos20$106
    .zip
  • data/userAccessControl.sh
  • data/userAccessControlCL.sh
  • data/userAccessControlCM.sh
  • data/userAccessLimit.sh
  • data/userAccountControl.sh
  • data/userAccountLogCJ.sh
  • data/userAccountLogCT.sh
  • data/userAuthDetach.sh
  • data/webConsoleUserCJ.sh
  • data/webSetControlCA.sh
  • data/weblogic$106
    .zip
  • data/wrongPageCA.sh
  • data/wrongPageCJ.sh
  • data/wrongPageCT.sh
  • data/wrongPageCW.sh
  • meta_info.json
  • Linux-V3.2.0-10.x86_64/patterns/osscan/vuln_os_p-b1.zip
    .zip
  • Linux-V3.2.0-10.x86_64/patterns/vulnpoc/vuln_poc_p-b1.zip
    .zip
  • Linux-V3.2.0-10.x86_64/patterns/wpscan/weakpwd_p-b1.zip
    .zip
  • Linux-V3.2.0-10.x86_64/test/appscan.json
  • Linux-V3.2.0-10.x86_64/test/assets.json
  • Linux-V3.2.0-10.x86_64/test/baseline.json
  • Linux-V3.2.0-10.x86_64/test/baseline_p-b2.zip
    .zip
  • Linux-V3.2.0-10.x86_64/test/cancel.json
  • Linux-V3.2.0-10.x86_64/test/hostdiscovery-cancel.json
  • Linux-V3.2.0-10.x86_64/test/hostdiscovery-default-scan-range.json
  • Linux-V3.2.0-10.x86_64/test/hostdiscovery-specify-scan-range.json
  • Linux-V3.2.0-10.x86_64/test/input01.json
  • Linux-V3.2.0-10.x86_64/test/osscan.json
  • Linux-V3.2.0-10.x86_64/test/patternUpdateCmd.json
  • Linux-V3.2.0-10.x86_64/test/reg.json
  • Linux-V3.2.0-10.x86_64/test/vuln_app_p-b2.zip
    .zip
  • Linux-V3.2.0-10.x86_64/test/vuln_os_p-b2.zip
    .zip
  • Linux-V3.2.0-10.x86_64/test/vulnpoc.json
  • Linux-V3.2.0-10.x86_64/test/wpscan.json