Overview

overview

7

Static

static

7

bin/cpu_limit.sh

ubuntu-18.04-amd64

1

bin/cpu_limit.sh

debian-9-armhf

1

bin/cpu_limit.sh

debian-9-mips

1

bin/cpu_limit.sh

debian-9-mipsel

1

bin/hr_agent

ubuntu-18.04-amd64

1

bin/hra_test

ubuntu-18.04-amd64

1

bin/scanma...ain.js

windows7-x64

1

bin/scanma...ain.js

windows10-2004-x64

1

bin/scanma...ios.js

windows7-x64

1

bin/scanma...ios.js

windows10-2004-x64

1

bin/scanma...nse.js

windows7-x64

1

bin/scanma...nse.js

windows10-2004-x64

1

bin/scanma...anager

ubuntu-18.04-amd64

3

bin/scanma...tat.js

windows7-x64

1

bin/scanma...tat.js

windows10-2004-x64

1

integrated....1.0.6

ubuntu-18.04-amd64

1

lib/libconfigsave.so

ubuntu-18.04-amd64

1

lib/libcrypto.so.10

ubuntu-18.04-amd64

1

lib/libcurl.so.4

ubuntu-18.04-amd64

1

lib/libhir....1.1.0

ubuntu-18.04-amd64

1

lib/libhos...ery.so

ubuntu-18.04-amd64

1

lib/libjsoncpp.so.1

ubuntu-18.04-amd64

1

lib/liblber-2.4.so.2

ubuntu-18.04-amd64

1

lib/libldap-2.4.so.2

ubuntu-18.04-amd64

1

lib/libminizip.so

ubuntu-18.04-amd64

1

lib/libmys....so.18

ubuntu-18.04-amd64

1

lib/libosscan.so

ubuntu-18.04-amd64

1

lib/libpq.so.5

ubuntu-18.04-amd64

1

lib/libsasl2.so.2

ubuntu-18.04-amd64

1

lib/libsqlite3.so.0

ubuntu-18.04-amd64

1

lib/libssl.so.10

ubuntu-18.04-amd64

1

lib/libupd...ern.so

ubuntu-18.04-amd64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    6a310e7dd2b66a3a205f17767b6d44e30770541232de6394172eab76c5eb440c

  • Size

    15.7MB

  • MD5

    b796dec9f3ba9524fd5ec8f33bbcc9bc

  • SHA1

    5197c6802d1144ced8229c0ab147040bae0e3122

  • SHA256

    6a310e7dd2b66a3a205f17767b6d44e30770541232de6394172eab76c5eb440c

  • SHA512

    18711d4db6c6310a490eaa8cc562052b1c4f5dcf37f2891fd9b3be2e17340aa7fbd46b1fe76c3dfdd4bbab85310e51d88916752de741ac322fb65d36c837f2e4

  • SSDEEP

    393216:d/B8Tl8cmoF9bb64t2CxcxkiUxPBFeecVwgCmkLeecVwgCmkv1:NBk8cmw96S2CxWUPZxrLPxrL9

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx

Files

  • 6a310e7dd2b66a3a205f17767b6d44e30770541232de6394172eab76c5eb440c
    .zip
  • bin/cpu_limit.sh
    .sh linux
  • bin/hr_agent
    .elf linux x64
  • bin/hra_test
    .elf linux x64
  • bin/scanmanager/nmap-mac-prefixes
  • bin/scanmanager/nmap-os-db
  • bin/scanmanager/nmap-protocols
  • bin/scanmanager/nmap-service-probes
  • bin/scanmanager/nmap-services
  • bin/scanmanager/nse_main.lua
    .js
  • bin/scanmanager/nselib/netbios.lua
    .js
  • bin/scanmanager/nselib/stdnse.lua
    .js
  • bin/scanmanager/scanmanager
    .elf linux x64
  • bin/scanmanager/scripts/nbstat.nse
    .js
  • docs/version.ini
  • integrated/HraApi.h
  • integrated/libhraapi.so.1.0.6
    .elf linux x64
  • lib/libconfigsave.so
    .elf linux x64
  • lib/libcrypto.so.10
    .elf linux x64
  • lib/libcurl.so.4
    .elf linux x64
  • lib/libhiredis.so.1.1.0
    .elf linux x64
  • lib/libhostdiscovery.so
    .elf linux x64
  • lib/libjsoncpp.so.1
    .elf linux x64
  • lib/liblber-2.4.so.2
    .elf linux x64
  • lib/libldap-2.4.so.2
    .elf linux x64
  • lib/libminizip.so
    .elf linux x64
  • lib/libmysqlclient.so.18
    .elf linux x64
  • lib/libosscan.so
    .elf linux x64
  • lib/libpq.so.5
    .elf linux x64
  • lib/libsasl2.so.2
    .elf linux x64
  • lib/libsqlite3.so.0
    .elf linux x64
  • lib/libssl.so.10
    .elf linux x64
  • lib/libupdatepattern.so
    .elf linux x64
  • lib/libxml2.so.2
    .elf linux x64
  • lib/libz.so.1
    .elf linux x64
  • patterns/appscan/vuln_soft_p-b1.zip
    .zip
  • data/ccp$36
  • meta_info.json
  • patterns/baseline/baseline_p-b1.zip
    .zip
  • data/CIScheckAvahiNotInstalled$121
  • data/CIScheckCUPSNotInstalled$121
  • data/CIScheckCronDailyPermissionsConfig$121
  • data/CIScheckCronHourlyPermissionsConfig$121
  • data/CIScheckCronMonthlyPermissionsConfig$121
  • data/CIScheckCronWeeklyPermissionsConfig$121
  • data/CIScheckCrondPermissionsConfig$121
  • data/CIScheckCrontabPermissionsConfig$121
  • data/CIScheckDHCPNotInstalled$121
  • data/CIScheckDNSNotInstalled$121
  • data/CIScheckEmptyPasswd$121
  • data/CIScheckFTPNotInstalled$121
  • data/CIScheckGroup-PermissionsConfig$121
  • data/CIScheckGroupPermissionsConfig$121
  • data/CIScheckGroupsLegal$121
  • data/CIScheckHTTPNotInstalled$121
  • data/CIScheckHTTPProxyServerNotInstalled$121
  • data/CIScheckIMAP&POP3NotInstalled$121
  • data/CIScheckInactivePasswdLockTime$121
  • data/CIScheckLDAPClientNotInstalled$121
  • data/CIScheckLDAPNotInstalled$121
  • data/CIScheckNetSnmpNotInstalled$121
  • data/CIScheckPasswd-PermissionsConfig$121
  • data/CIScheckPasswdChangeDeadline$121
  • data/CIScheckPasswdComplexityConfig$121
  • data/CIScheckPasswdExpirationWarningDays$121
  • data/CIScheckPasswdLockout$121
  • data/CIScheckPasswdPermissionsConfig$121
  • data/CIScheckPasswdReuse$121
  • data/CIScheckPasswdValidityPeriod$121
  • data/CIScheckRootUID$121
  • data/CIScheckRsyncNotInstalled$121
  • data/CIScheckRsyslogEnabledAndRunning$121
  • data/CIScheckRsyslogFilePermissionsConfig$121
  • data/CIScheckRsyslogNotInstalled$121
  • data/CIScheckSambaNotInstalled$121
  • data/CIScheckShadow-PermissionsConfig$121
  • data/CIScheckShadowPermissionsConfig$121
  • data/CIScheckSuConfig$121
  • data/CIScheckTelnetClientNotInstalled$121
  • data/CIScheckUniqueGID$121
  • data/CIScheckUniqueUID$121
  • data/CIScheckUniqueUsername$121
  • data/CIScheckUserHomeDir$121
  • data/CIScheckUserUmask$121
  • data/CIScheckX11ServerNotInstall$121
  • data/CISchecksshAccessLimit$121
  • data/CISchecksshEmptyPasswd$121
  • data/CISchecksshHostbaseddisabled$121
  • data/CISchecksshIgnoreRhosts$121
  • data/CISchecksshLogLevel$121
  • data/CISchecksshLoginGraceTime$121
  • data/CISchecksshMaxAuth$121
  • data/CISchecksshPermitUserEnv$121
  • data/CISchecksshTimeout$121
  • data/CISchecksshWarningConfig$121
  • data/CISchecksshX11Disabled$121
  • data/CISchecksshd_configPermissionsConfig$121
  • data/CISchecksshrootlogindisabled$121
  • data/CheckWeakPwd.sh
  • data/accessControlCN.sh
  • data/accountLimitCW.sh
  • data/amznlinux2$121
    .zip
  • AmznLinux2/checkAm.sh
  • AmznLinux2/checkAuditdAndRsyslog.sh
  • AmznLinux2/checkDpi.sh
  • AmznLinux2/checkEtcChownAndChmod.sh
  • AmznLinux2/checkHomeDirAndSshKey.sh
  • AmznLinux2/checkLogProtect.sh
  • AmznLinux2/closeSharing.sh
  • AmznLinux2/default.sh
  • AmznLinux2/defaultAccount.sh
  • AmznLinux2/deleteExtraAccount.sh
  • AmznLinux2/enableSecurityCheck.sh
  • AmznLinux2/loginAccountVerify.sh
  • AmznLinux2/loginFailureHandle.sh
  • AmznLinux2/remoteInfoProtect.sh
  • AmznLinux2/removeUnnecessarySoftware.sh
  • AmznLinux2/terminalNetRestriction.sh
  • AmznLinux2/userAccessControl.sh
  • AmznLinux2/userMinAuthority.sh
  • data/anolisos7$121
    .zip
  • AnolisOS7/checkAm.sh
  • AnolisOS7/checkAuditdAndRsyslog.sh
  • AnolisOS7/checkDpi.sh
  • AnolisOS7/checkEtcChownAndChmod.sh
  • AnolisOS7/checkHomeDirAndSshKey.sh
  • AnolisOS7/checkLogProtect.sh
  • AnolisOS7/closeSharing.sh
  • AnolisOS7/default.sh
  • AnolisOS7/defaultAccount.sh
  • AnolisOS7/deleteExtraAccount.sh
  • AnolisOS7/enableSecurityCheck.sh
  • AnolisOS7/loginAccountVerify.sh
  • AnolisOS7/loginFailureHandle.sh
  • AnolisOS7/remoteInfoProtect.sh
  • AnolisOS7/removeUnnecessarySoftware.sh
  • AnolisOS7/terminalNetRestriction.sh
  • AnolisOS7/userAccessControl.sh
  • AnolisOS7/userMinAuthority.sh
  • data/anolisos8$121
    .zip
  • AnolisOS8/checkAm.sh
  • AnolisOS8/checkAuditdAndRsyslog.sh
  • AnolisOS8/checkDpi.sh
  • AnolisOS8/checkEtcChownAndChmod.sh
  • AnolisOS8/checkHomeDirAndSshKey.sh
  • AnolisOS8/checkLogProtect.sh
  • AnolisOS8/closeSharing.sh
  • AnolisOS8/default.sh
  • AnolisOS8/defaultAccount.sh
  • AnolisOS8/deleteExtraAccount.sh
  • AnolisOS8/enableSecurityCheck.sh
  • AnolisOS8/loginAccountVerify.sh
  • AnolisOS8/loginFailureHandle.sh
  • AnolisOS8/remoteInfoProtect.sh
  • AnolisOS8/removeUnnecessarySoftware.sh
  • AnolisOS8/terminalNetRestriction.sh
  • AnolisOS8/userAccessControl.sh
  • AnolisOS8/userMinAuthority.sh
  • data/apache$121
    .zip
  • Apache/checkLogLevel.sh
  • Apache/denyServiceProtect.sh
  • Apache/fileAccessControl.sh
  • Apache/infoProtect.sh
  • Apache/noRootAccount.sh
  • Apache/webSetControl.sh
  • Apache/wrongPage.sh
  • data/autoAccountExitCL.sh
  • data/autoAccountExitCT.sh
  • data/bclinux7$121
    .zip
  • BCLinux7/checkAm.sh
  • BCLinux7/checkAuditdAndRsyslog.sh
  • BCLinux7/checkDpi.sh
  • BCLinux7/checkEtcChownAndChmod.sh
  • BCLinux7/checkHomeDirAndSshKey.sh
  • BCLinux7/checkLogProtect.sh
  • BCLinux7/closeSharing.sh
  • BCLinux7/default.sh
  • BCLinux7/defaultAccount.sh
  • BCLinux7/deleteExtraAccount.sh
  • BCLinux7/enableSecurityCheck.sh
  • BCLinux7/loginAccountVerify.sh
  • BCLinux7/loginFailureHandle.sh
  • BCLinux7/remoteInfoProtect.sh
  • BCLinux7/removeUnnecessarySoftware.sh
  • BCLinux7/terminalNetRestriction.sh
  • BCLinux7/userAccessControl.sh
  • BCLinux7/userMinAuthority.sh
  • data/blp$121
  • data/centos6$121
    .zip
  • CentOS6/checkAm.sh
  • CentOS6/checkAuditdAndRsyslog.sh
  • CentOS6/checkDpi.sh
  • CentOS6/checkEtcChownAndChmod.sh
  • CentOS6/checkHomeDirAndSshKey.sh
  • CentOS6/checkLogProtect.sh
  • CentOS6/closeSharing.sh
  • CentOS6/default.sh
  • CentOS6/defaultAccount.sh
  • CentOS6/deleteExtraAccount.sh
  • CentOS6/enableSecurityCheck.sh
  • CentOS6/loginAccountVerify.sh
  • CentOS6/loginFailureHandle.sh
  • CentOS6/remoteInfoProtect.sh
  • CentOS6/removeUnnecessarySoftware.sh
  • CentOS6/terminalNetRestriction.sh
  • CentOS6/userAccessControl.sh
  • CentOS6/userMinAuthority.sh
  • data/centos7$121
    .zip
  • data/centos8$121
    .zip
  • data/centos9$121
    .zip
  • data/checkAccountCN.sh
  • data/checkAllSecurity.sh
  • data/checkAm.sh
  • data/checkAuditdAndRsyslog.sh
  • data/checkBinLogCM.sh
  • data/checkChmodCN.sh
  • data/checkClientBodyCN.sh
  • data/checkClientHeaderCN.sh
  • data/checkDirAuth.sh
  • data/checkDpi.sh
  • data/checkErrorLogCA.sh
  • data/checkErrorLogCM.sh
  • data/checkEtcChownAndChmod.sh
  • data/checkExpiredDisconnect.sh
  • data/checkGeneralLogCM.sh
  • data/checkGhostShadowAuth.sh
  • data/checkGroupAuth.sh
  • data/checkGroupAuthCL.sh
  • data/checkHomeDir.sh
  • data/checkHomeDirAndSshKey.sh
  • data/checkHostsAuth.sh
  • data/checkHttpDataCA.sh
  • data/checkHttpsDataCA.sh
  • data/checkKeepAliveCA.sh
  • data/checkKeepAliveCN.sh
  • data/checkLogFormatCA.sh
  • data/checkLogLevelCA.sh
  • data/checkLogPathCA.sh
  • data/checkLogProtect.sh
  • data/checkLoginFailure.sh
  • data/checkNoLoginUser.sh
  • data/checkPasswdAuth.sh
  • data/checkPasswdAuthCL.sh
  • data/checkPasswdComplexity.sh
  • data/checkPasswdMaxDay.sh
  • data/checkPasswdMinDay.sh
  • data/checkPasswordReuse.sh
  • data/checkPermitRootLogin.sh
  • data/checkPrivateSshKey.sh
  • data/checkProfileAuth.sh
  • data/checkProxypassCN.sh
  • data/checkPublicSshKey.sh
  • data/checkRootUID.sh
  • data/checkSSHDV2Protocol.sh
  • data/checkSSHStatusCL.sh
  • data/checkSecurityAudit.sh
  • data/checkSecurityRsyslog.sh
  • data/checkSendTimeoutCN.sh
  • data/checkSessionDisconnect.sh
  • data/checkShadowAuth.sh
  • data/checkShadowAuthCL.sh
  • data/checkSlaveUpdatesLogCM.sh
  • data/checkSlowQueryLogCM.sh
  • data/checkSshdAuth.sh
  • data/checkTimeOutCA.sh
  • data/checkUmask.sh
  • data/checkUserUniqueness.sh
  • data/checkVulnerability.sh
  • data/closeHighRiskPort.sh
  • data/closeIMAPService.sh
  • data/closeNFSService.sh
  • data/closeRPCService.sh
  • data/closeRSHService.sh
  • data/closeSMBService.sh
  • data/closeTALKService.sh
  • data/closeTelnetService.sh
  • data/commlinux$121
    .zip
  • data/connectionAutoExitCO.sh
  • data/custAccountLockPolicy.sh
  • data/custCheckPort.sh
  • data/custCheckPsswdLenth.sh
  • data/custCheckPsswdMaxDays.sh
  • data/custCheckPsswdMinDays.sh
  • data/custCheckPsswdPolicy.sh
  • data/custCheckRunningProcess.sh
  • data/custCheckSoftware.sh
  • data/cust_blp$121
  • data/dataTransSafeCO.sh
  • data/deaultWebCA.sh
  • data/deleteExtraAccount.sh
  • data/deleteExtraAccountCL.sh
  • data/denyFileDisplayCJ.sh
  • data/denyFileDisplayCT.sh
  • data/denyFileDisplayCW.sh
  • data/disableIndexCA.sh
  • data/fileAccessControlCA.sh
  • data/hideBannerCN.sh
  • data/infoProtectCA.sh
  • data/ipAccessControlCO.sh
  • data/jboss$121
    .zip
  • data/jmxConsoleUserCJ.sh
  • data/judgeEmptyPasswd.sh
  • data/kylin10$121
    .zip
  • data/kylin10sp1$121
    .zip
  • data/kylinsever10$121
    .zip
  • data/listenerPasswdCO.sh
  • data/loginAccountVerifyCL.sh
  • data/maxOpenSockCW.sh
  • data/minAuthorityCT.sh
  • data/multiUserControlCT.sh
  • data/mysql$121
    .zip
  • data/neokylin7$121
    .zip
  • data/netConnectionCM.sh
  • data/nginx$121
    .zip
  • data/noRootAccountCA.sh
  • data/noRootUserCW.sh
  • data/oe22$121
    .zip
  • data/oracle$121
    .zip
  • data/oracle7$121
    .zip
  • data/oracle8$121
    .zip
  • data/package/AAAConfig$121
  • data/package/Common$121
  • data/package/FileConfiguration$121
  • data/package/ServicesAndSoftware$121
  • data/passwdLimitCW.sh
  • data/redhat6$121
    .zip
  • data/redhat7$121
    .zip
  • data/redhat8$121
    .zip
  • data/redhat9$121
    .zip
  • data/regularPasswordUpdateCL.sh
  • data/remoteLoginRestrictionsCL.sh
  • data/removeAvahi.sh
  • data/removeBluez.sh
  • data/removeFirstBoot.sh
  • data/removeKdump.sh
  • data/removeNetWorkManager.sh
  • data/removeWPS.sh
  • data/removeYPBind.sh
  • data/selectSudoChange.sh
  • data/selectUserEvents.sh
  • data/string_res$121
  • data/suse12$121
    .zip
  • data/suse15$121
    .zip
  • data/terminalNetAllow.sh
  • data/terminalNetDeny.sh
  • data/tomcat$121
    .zip
  • data/ubuntu16$121
    .zip
  • data/ubuntu18$121
    .zip
  • data/ubuntu20$121
    .zip
  • data/ubuntu22$121
    .zip
  • data/uos1001c$121
    .zip
  • data/uos1020e$121
    .zip
  • data/uos20$121
    .zip
  • data/userAccessControl.sh
  • data/userAccessControlCL.sh
  • data/userAccessControlCM.sh
  • data/userAccessLimit.sh
  • data/userAccountControl.sh
  • data/userAccountLogCJ.sh
  • data/userAccountLogCT.sh
  • data/userAuthDetach.sh
  • data/webConsoleUserCJ.sh
  • data/webSetControlCA.sh
  • data/weblogic$121
    .zip
  • data/wrongPageCA.sh
  • data/wrongPageCJ.sh
  • data/wrongPageCT.sh
  • data/wrongPageCW.sh
  • meta_info.json
  • patterns/osscan/vuln_os_p-b1.zip
    .zip
  • patterns/vulnpoc/vuln_poc_p-b1.zip
    .zip
  • patterns/wpscan/weakpwd_p-b1.zip
    .zip
  • test/appscan.json
  • test/assets.json
  • test/baseline.json
  • test/baseline_p-b2.zip
    .zip
  • test/cancel.json
  • test/hostdiscovery-cancel.json
  • test/hostdiscovery-default-scan-range.json
  • test/hostdiscovery-specify-scan-range.json
  • test/input01.json
  • test/osscan.json
  • test/patternUpdateCmd.json
  • test/reg.json
  • test/vuln_app_p-b2.zip
    .zip
  • test/vuln_os_p-b2.zip
    .zip
  • test/vulnpoc.json
  • test/wpscan.json
  • version.ini