Overview

overview

10

Static

static

10

licenses/c...taller

ubuntu-18.04-amd64

3

licenses/c...taller

ubuntu-18.04-amd64

3

licenses/c...taller

ubuntu-18.04-amd64

3

licenses/c...taller

ubuntu-18.04-amd64

3

licenses/c...taller

ubuntu-18.04-amd64

3

licenses/d...taller

ubuntu-18.04-amd64

3

licenses/d...taller

ubuntu-18.04-amd64

3

licenses/d...taller

ubuntu-18.04-amd64

3

licenses/d...taller

ubuntu-18.04-amd64

3

licenses/d...er.ps1

windows7-x64

8

licenses/d...er.ps1

windows10-2004-x64

8

licenses/f...taller

ubuntu-18.04-amd64

1

licenses/i...taller

ubuntu-18.04-amd64

3

licenses/j...taller

ubuntu-18.04-amd64

3

licenses/k...taller

ubuntu-18.04-amd64

3

licenses/l...taller

ubuntu-18.04-amd64

1

licenses/o...taller

ubuntu-18.04-amd64

3

licenses/p...taller

ubuntu-18.04-amd64

3

licenses/p...er.ps1

windows7-x64

8

licenses/p...er.ps1

windows10-2004-x64

8

licenses/s...taller

ubuntu-18.04-amd64

3

licenses/s...taller

ubuntu-18.04-amd64

3

licenses/v...taller

ubuntu-18.04-amd64

3

licenses/w...taller

ubuntu-18.04-amd64

3

licenses/w...taller

ubuntu-18.04-amd64

3

licenses/w...taller

ubuntu-18.04-amd64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    4ada790a1ee266becf7b0878fbd07559d3448994435368c668a002b467190d61.zip.zip

  • Size

    35.8MB

  • MD5

    350ff4bbf39b5ee1f4038cc019c2c234

  • SHA1

    605465d7ee8575134cf2d51fa469036162609914

  • SHA256

    1a17016b159d91839ee4191441a630862d01b775de6050b07d2cfecba70791bc

  • SHA512

    74d723a23c2624db2550f0133a7880c0c1fe7793bd5cd7adbc9a7f141c7b9f67399fc30cb0935be717fc352ea3231929324990f248983b0df2633f4efe748f77

  • SSDEEP

    786432:kKtaexa+G9fu23dVe6jw/tOzuhUYjhqmfBV5LKMc0k6CH+lUG6ojKN:/BGxuKzGtf/jf8Mzk6CzG6om

Score
10/10
upx

Malware Config

Extracted

Language
ps1
Deobfuscated
URLs
exe.dropper

https://files.airectadmin.com/licenses/dplesk/installerw

Extracted

Language
ps1
Deobfuscated
URLs
exe.dropper

https://files.airectadmin.com/licenses/plesk/installerw

Signatures

  • UPX packed file 22 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx

Files

  • 4ada790a1ee266becf7b0878fbd07559d3448994435368c668a002b467190d61.zip.zip
    .zip

    Password: infected

  • 4ada790a1ee266becf7b0878fbd07559d3448994435368c668a002b467190d61.zip
    .zip
  • licenses/cloudlinux/installer
    .elf linux x64
  • licenses/cpanel/installer
    .elf linux x64
  • licenses/cpguard/installer
    .elf linux x64
  • licenses/cpnginx/installer
    .elf linux x64
  • licenses/cxs/installer
    .elf linux x64
  • licenses/dareseller/installer
    .elf linux x64
  • licenses/dcpanel/installer
    .elf linux x64
  • licenses/directadmin/installer
    .elf linux x64
  • licenses/dplesk/installer
    .elf linux x64
  • licenses/dplesk/installer.ps1
    .ps1
  • licenses/fleetssl/installer
    .elf linux x64
  • licenses/imunify360/installer
    .elf linux x64
  • licenses/jetbackup/installer
    .elf linux x64
  • licenses/kernelcare/installer
    .elf linux x64
  • licenses/litespeed/installer
    .elf linux x64
  • licenses/osm/installer
    .elf linux x64
  • licenses/plesk/installer
    .elf linux x64
  • licenses/plesk/installer.ps1
    .ps1
  • licenses/sitepad/installer
    .elf linux x64
  • licenses/softaculous/installer
    .elf linux x64
  • licenses/virtualizor/installer
    .elf linux x64
  • licenses/webuzo/installer
    .elf linux x64
  • licenses/whmcs/81/License.zip
    .zip
  • License.php
  • licenses/whmcs/License.zip
    .zip
  • License.php
  • licenses/whmreseller/installer
    .elf linux x64
  • licenses/whmsonic/installer
    .elf linux x64