Overview

overview

3

Static

static

1

gosh/clean

ubuntu-18.04-amd64

gosh/go.sh

windows7-x64

3

gosh/go.sh

windows10-2004-x64

3

gosh/ss

ubuntu-18.04-amd64

1

gosh/ssh-scan

ubuntu-18.04-amd64

1

gosh/vuln

ubuntu-18.04-amd64

1

gosh/vuln

debian-9-armhf

1

gosh/vuln

debian-9-mips

1

gosh/vuln

debian-9-mipsel

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2befe3d69496c35478a192ecd2bfb1f0

  • Size

    581KB

  • Sample

    231221-3v1xyscdgj

  • MD5

    2befe3d69496c35478a192ecd2bfb1f0

  • SHA1

    c0ea15400875bf8cd429ad58f63b37c892a29cfe

  • SHA256

    6a20ed14350c485ccb8ede748b8b6e195a291b0fe48ac6359da3cb92e734ab1e

  • SHA512

    4951f884e75c42d775a9e0758daf6dc6406825a69ed96b4fe5f49f89ec3c2660f74a1d77b9e6a0c51e0f58f52730b0e60c6aefe6a97e908a5c3c167f99dbce3e

  • SSDEEP

    12288:l+RYsUDz20KwVGNN+sN26AA5zXZ53X88F0V2+3eZCljhG:ldsUe0Kw8NNtGszr3NKCCZhG

Score
3/10
linux

Malware Config

Targets

    • Target

      gosh/clean

    • Size

      17KB

    • MD5

      ceb6def31e1ac284c1cb4964afb7b9b4

    • SHA1

      d48e04690f1c92b104397eadd1e50906e15de434

    • SHA256

      51add65b301a932a458882b9378973906a662b10c96615269c6e7862075cd93c

    • SHA512

      36cda7443b7811ddc3780c4656ab9a36cd469cce73e40f3297601003790a7a2d120959c3ad23b988fd164e508605c1e6b7599e60e65199a4cca1b2637215b746

    • SSDEEP

      384:freO1qSmhekXQr/NMCtnjH9RJ63lVSYVHreqIEAWO7p:zegLmh4MunjH9RJ63lVheqIEJO1

    Score
    1/10
    behavioral1

    • Target

      gosh/go.sh

    • Size

      162B

    • MD5

      09897179d2264af0459cd63fd5620884

    • SHA1

      8a658478f6fa8b069bc3b8b458ceb8778b739131

    • SHA256

      a57a62e6743b0ab59041fc363f110a6bca57f41637f7db35d4cf4f496adc90e9

    • SHA512

      5c5358b66108e2a2791824c122c00e3f9a6a4eed954f4938a6776a564664bddfbd8f8be0563e3f7de606e635bb4ba94bdd72aff11dfbd952bb6b8478bf9cf7b3

    Score
    3/10
    behavioral2behavioral3

    • Target

      gosh/ss

    • Size

      443KB

    • MD5

      b51a52c9c82bb4401659b4c17c60f89f

    • SHA1

      b45ae5d8d3069ee7f880dd461c931fa711b6ad3d

    • SHA256

      97093a1ef729cb954b2a63d7ccc304b18d0243e2a77d87bbbb94741a0290d762

    • SHA512

      600c956d612b9b59d9846d5e83c009b6bac646ef2ba763dd54126ddf2e1a2c86c70960dbc9f836e6cbd6c7296c3f1801151a1548af904c61375d096c23aa0f68

    • SSDEEP

      6144:gIM21beIrQCxAeQmnT3V3xNNZkYgy2CZTLdUyh:NdbeIrT9QmbVDNZkMZLdUq

    Score
    1/10
    behavioral4

    • Target

      gosh/ssh-scan

    • Size

      822KB

    • MD5

      a213ebd69fbc11d612d0374b373f65d8

    • SHA1

      4f64a5b07b0c128771ea21bf4aa15610fc6b071c

    • SHA256

      93df64cc0ff902ad1e80ada56023610ec2c44c3ecde2d36d37a3a748c7fd42bd

    • SHA512

      eb1f005984d50cfd40f26730e8206d9455c1f3560ba90338019911987d2c401e93e70c7565ac68c291a19e04d346fc01cc7b8eaa57942bbcad5d64ab543ad5a3

    • SSDEEP

      24576:U8dJG9L4f0TYRsbalWjFm4z33bavoZ4UZZ2HQ:dzG9LvDbalG04rb6oZ4EQHQ

    Score
    1/10
    behavioral5

    • Target

      gosh/vuln

    • Size

      164B

    • MD5

      4728a82104b6cde602b921427215cf24

    • SHA1

      b23a0f4df99caa31a78ad616935c6a647d21b8a8

    • SHA256

      2b3a2988a39b66e44b085e06f4a06e7493a755f5d20f7012a7a6be36cc71994e

    • SHA512

      1f9bbcf40ffe6608fc83b9e1161e2fd73ba006a343195bd5278a8f6a9afe09c0efd426a0ecca4e9ee54f7f5e812cc785f05562215f7d2e7dc43f16cc5a5a8fa4

    Score
    1/10
    behavioral6behavioral7behavioral8behavioral9

MITRE ATT&CK Enterprise v15

Tasks