Overview
overview
6Static
static
1gosh/3.vbs
windows7-x64
1gosh/3.vbs
windows10-2004-x64
1gosh/gcc.js
windows7-x64
1gosh/gcc.js
windows10-2004-x64
1gosh/gen-pass.sh
ubuntu-18.04-amd64
1gosh/gen-pass.sh
debian-9-armhf
1gosh/gen-pass.sh
debian-9-mips
1gosh/gen-pass.sh
debian-9-mipsel
1gosh/go.sh
windows7-x64
3gosh/go.sh
windows10-2004-x64
3gosh/pscan2
ubuntu-18.04-amd64
gosh/scam
ubuntu-18.04-amd64
6gosh/scam
debian-9-armhf
6gosh/scam
debian-9-mips
6gosh/scam
debian-9-mipsel
3gosh/secure
ubuntu-18.04-amd64
3gosh/secure
debian-9-armhf
3gosh/secure
debian-9-mips
1gosh/secure
debian-9-mipsel
1gosh/ss
ubuntu-18.04-amd64
1gosh/ssh-scan
ubuntu-18.04-amd64
1General
-
Target
5e434434bf361db11e35bec53cb462d0
-
Size
1.6MB
-
Sample
231222-eds9sabgar
-
MD5
5e434434bf361db11e35bec53cb462d0
-
SHA1
d2f47992f5f69e6b1436f0c27402efad04e4a089
-
SHA256
3c8d82009cfdecc57c0dd6ce42bdaef5df6142c1f949dc7616641fc876619382
-
SHA512
7ddcc1275072bbb1fe870ab0d1eb9cf86d03068a48e26ba6c55812ad13245cde02c8fb17343aab684830396fbdba6a9fd8f157ee195282b1766b4d76cde8a33c
-
SSDEEP
49152:iGlHpB4ao7a4qXOwxopf87BnkUp9q0f1tE1t:iGlHr4aoGJoPUXf1Wt
Static task
static1
Behavioral task
behavioral1
Sample
gosh/3.vbs
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
gosh/3.vbs
Resource
win10v2004-20231215-en
Behavioral task
behavioral3
Sample
gosh/gcc.js
Resource
win7-20231129-en
Behavioral task
behavioral4
Sample
gosh/gcc.js
Resource
win10v2004-20231215-en
Behavioral task
behavioral5
Sample
gosh/gen-pass.sh
Resource
ubuntu1804-amd64-20231215-en
Behavioral task
behavioral6
Sample
gosh/gen-pass.sh
Resource
debian9-armhf-20231215-en
Behavioral task
behavioral7
Sample
gosh/gen-pass.sh
Resource
debian9-mipsbe-20231215-en
Behavioral task
behavioral8
Sample
gosh/gen-pass.sh
Resource
debian9-mipsel-20231215-en
Behavioral task
behavioral9
Sample
gosh/go.sh
Resource
win7-20231215-en
Behavioral task
behavioral10
Sample
gosh/go.sh
Resource
win10v2004-20231215-en
Behavioral task
behavioral11
Sample
gosh/pscan2
Resource
ubuntu1804-amd64-20231215-en
Behavioral task
behavioral12
Sample
gosh/scam
Resource
ubuntu1804-amd64-20231215-en
Behavioral task
behavioral13
Sample
gosh/scam
Resource
debian9-armhf-20231215-en
Behavioral task
behavioral14
Sample
gosh/scam
Resource
debian9-mipsbe-20231215-en
Behavioral task
behavioral15
Sample
gosh/scam
Resource
debian9-mipsel-20231215-en
Behavioral task
behavioral16
Sample
gosh/secure
Resource
ubuntu1804-amd64-20231215-en
Behavioral task
behavioral17
Sample
gosh/secure
Resource
debian9-armhf-20231215-en
Behavioral task
behavioral18
Sample
gosh/secure
Resource
debian9-mipsbe-20231215-en
Behavioral task
behavioral19
Sample
gosh/secure
Resource
debian9-mipsel-20231215-en
Behavioral task
behavioral20
Sample
gosh/ss
Resource
ubuntu1804-amd64-20231215-en
Behavioral task
behavioral21
Sample
gosh/ssh-scan
Resource
ubuntu1804-amd64-20231215-en
Malware Config
Targets
-
-
Target
gosh/3
-
Size
28KB
-
MD5
07e3f42d5312adc859e8ee7733500531
-
SHA1
17e32b6ebd664d9c36b23bff41f3451c8b87e3b3
-
SHA256
c8e4ed5933cd83d52a5876311cf1930e53fa5457dceea3c7efc9ed956f7a73b1
-
SHA512
16e291794f7f4ab47c62de75eb99f1b582ecd1dccdad497c287d0cb88323a984a12243a97c16a6bf80aab86cb7b07d14df5fc75d79c5967ac96312b0a5fb535e
-
SSDEEP
768:IB5dl0Zbq9S2Fc1onBM7rK+xvr7b1W9OvNtMcO:IBL+0S2FhC797+OvNo
Score1/10 -
-
-
Target
gosh/gcc.c
-
Size
34KB
-
MD5
dbfc44d20945f5411b715b5c725cb30c
-
SHA1
2458c5bd32d683e7e92daaf9541f18fefd49ea2d
-
SHA256
96cf3ce970e9d19cc1dddb190440318fe2de59cc88831f1ebe8fb47d86d1fef2
-
SHA512
9bcc307f188e17c0027fa9c565d3af50cfcab4242a0307f9b7919868b824a530954bba01c6593dbe3b8784e9927f06c91c81bf1e1532ec4bb464bb7a0b859c58
-
SSDEEP
768:1LJwCp2gfDH42NpshNkkOG0Qau8AkQD09WiQB4Xjxc37zuIwcm:J2FNkkHN09WiQB8U7iv
Score1/10 -
-
-
Target
gosh/gen-pass.sh
-
Size
265B
-
MD5
615c08bb1acdf2f21490450991766187
-
SHA1
6fca943c9d31ef25cd9263e576021206943c03d5
-
SHA256
e7031aaa218f814ec442f7fc5cc545980a537d777db491c425d60f0be3366074
-
SHA512
5cc82a0ba4ce23d6598a719fff2406456a9b8708cfd25572044b180ad3bc64365da3dc2b39e07c357bcb7e9a5706db752dc770524410321e9c06fb9d19d6930b
Score1/10 -
-
-
Target
gosh/go.sh
-
Size
162B
-
MD5
3d69a2f2b88abdeabfa5c522499a1c28
-
SHA1
c9e7c1c34d713016a8489a36f84cbf2a6c607cf8
-
SHA256
3a44dde159adcb55c2fe5e26f4bc1a3a0ac5975b6ae9ec8ed5cb93666a087ba2
-
SHA512
41a9bacbe42607d4e20512ea4db050ae013010e94131f507d32c7930b2afd416eda2eb01eb04851be504ef0bfe35696a9b36f636db2f586879e626376bb5158a
Score3/10 -
-
-
Target
gosh/pscan2
-
Size
20KB
-
MD5
acba0143d0cbcf8092b8b44d914d7983
-
SHA1
dd78792e0efcc8b116341538084f64a19e291432
-
SHA256
cc3f6c535787c71bed14ec8ac3b6feb59fe3b09fc53c69f1fe592103f2632764
-
SHA512
d3f761e04b4bb178d586e8ce6d4bdf845d9144609fa62637ddc1333fa302574cfcb071873b14140d81e5271f52b17fdac2c1fb870702bdf00e44ae2a22acade1
-
SSDEEP
384:fuUyGp50UZlh5aLhOBbdbFsc8aApFW60Vfo:W5CtHaLhOBbdb2c8aApFkBo
Score1/10 -
-
-
Target
gosh/scam
-
Size
4KB
-
MD5
fc457f091269f8303f5499043a655c24
-
SHA1
cb8be781eb141222fe1f617911b6e89f40ecab06
-
SHA256
c574d640d3e80fdc76992c4b872b7a3768a7dc54213cf49c0cc6b6c47608cfc3
-
SHA512
770bce5e962feaede5800aa27e3dad89ee364eccb5aa4f01ad2c8bec6fcc32a27b16ea4833911b768c24d939fdb4fac7cb8af4dd7b204e975fafa2d427d5b092
-
SSDEEP
96:Fymtc3nmUyp8zW9wnqoZpIS2baUrKhI/uVcTR6bEkIev45CC5MDmNA36Rnw9Wz8Z:S35eNbWf
Score6/10-
Enumerates running processes
Discovers information about currently running processes on the system
-
Reads CPU attributes
-
-
-
Target
gosh/secure
-
Size
197B
-
MD5
39acbfc1e983e45308cdab2d3ec4bf34
-
SHA1
f8f712474d0c1e80126f8fc91e9ffd819f7d7f45
-
SHA256
b7bfce3e886608199e7dd31bcd4af0d84eaa90267e45273278e8826dfa993133
-
SHA512
e1f6782e1130deb6dd27e922e663136e0896747819c853750b237d2dd18e1951e4796c65bdc3bd4e77974afe8880a8309e495440abde920a5f9f6b40bc7512b6
Score3/10 -
-
-
Target
gosh/ss
-
Size
443KB
-
MD5
b51a52c9c82bb4401659b4c17c60f89f
-
SHA1
b45ae5d8d3069ee7f880dd461c931fa711b6ad3d
-
SHA256
97093a1ef729cb954b2a63d7ccc304b18d0243e2a77d87bbbb94741a0290d762
-
SHA512
600c956d612b9b59d9846d5e83c009b6bac646ef2ba763dd54126ddf2e1a2c86c70960dbc9f836e6cbd6c7296c3f1801151a1548af904c61375d096c23aa0f68
-
SSDEEP
6144:gIM21beIrQCxAeQmnT3V3xNNZkYgy2CZTLdUyh:NdbeIrT9QmbVDNZkMZLdUq
Score1/10 -
-
-
Target
gosh/ssh-scan
-
Size
822KB
-
MD5
a213ebd69fbc11d612d0374b373f65d8
-
SHA1
4f64a5b07b0c128771ea21bf4aa15610fc6b071c
-
SHA256
93df64cc0ff902ad1e80ada56023610ec2c44c3ecde2d36d37a3a748c7fd42bd
-
SHA512
eb1f005984d50cfd40f26730e8206d9455c1f3560ba90338019911987d2c401e93e70c7565ac68c291a19e04d346fc01cc7b8eaa57942bbcad5d64ab543ad5a3
-
SSDEEP
24576:U8dJG9L4f0TYRsbalWjFm4z33bavoZ4UZZ2HQ:dzG9LvDbalG04rb6oZ4EQHQ
Score1/10 -