Overview

overview

10

Static

static

7

.rsync/a/a

ubuntu-18.04-amd64

10

.rsync/a/a

debian-9-armhf

10

.rsync/a/a

debian-9-mips

7

.rsync/a/a

debian-9-mipsel

7

.rsync/a/init0

ubuntu-18.04-amd64

6

.rsync/a/init0

debian-9-armhf

6

.rsync/a/init0

debian-9-mips

6

.rsync/a/init0

debian-9-mipsel

6

.rsync/a/kswapd0

ubuntu-18.04-amd64

10

.rsync/a/run

ubuntu-18.04-amd64

3

.rsync/a/run

debian-9-armhf

3

.rsync/a/run

debian-9-mips

3

.rsync/a/run

debian-9-mipsel

3

.rsync/a/stop

ubuntu-18.04-amd64

10

.rsync/a/stop

debian-9-armhf

10

.rsync/a/stop

debian-9-mips

6

.rsync/a/stop

debian-9-mipsel

6

.rsync/b/a

ubuntu-18.04-amd64

7

.rsync/b/a

debian-9-armhf

7

.rsync/b/a

debian-9-mips

6

.rsync/b/a

debian-9-mipsel

7

.rsync/b/run

ubuntu-18.04-amd64

7

.rsync/b/run

debian-9-armhf

7

.rsync/b/run

debian-9-mips

7

.rsync/b/run

debian-9-mipsel

7

.rsync/b/stop

ubuntu-18.04-amd64

6

.rsync/b/stop

debian-9-armhf

6

.rsync/b/stop

debian-9-mips

6

.rsync/b/stop

debian-9-mipsel

6

.rsync/c/blitz

ubuntu-18.04-amd64

1

.rsync/c/blitz

debian-9-armhf

1

.rsync/c/blitz

debian-9-mips

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    46.101.121.35-dota3.tar.gz

  • Size

    4.2MB

  • MD5

    26abd4d721b3f566d47a487838ef288c

  • SHA1

    1bbbde17c6e8c31e3432a6b13bd73bafa6be8c7f

  • SHA256

    105e32c8ef13d4d001923c1a43a8849d069fc4adebe48e5e6a9e726eb605ce31

  • SHA512

    1afcda0d65cdec5fef72a8e800e7373abcd993ee9a874fdf9ced7c1fdcdd9ae613dc2ecb2da437c8b62c418e73c0e1647190f29a0d0bdc7618d4c905327a0a28

  • SSDEEP

    98304:sZ4TV9IbELYtHQ/zyZ9Pv8xkUQSeWRwgQg6NxT0Jk2TFGy0:sZUV9US/g9Pv8OUVLQg6vwm2TFGy0

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 3 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx

Files

  • 46.101.121.35-dota3.tar.gz
    .gz
  • sample
    .tar
  • .rsync/a/a
    .sh linux
  • .rsync/a/init0
    .sh linux
  • .rsync/a/kswapd0
    .elf linux x64
  • .rsync/a/run
    .sh linux
  • .rsync/a/stop
    .sh linux
  • .rsync/b/a
    .sh linux
  • .rsync/b/run
    .sh linux
  • .rsync/b/stop
    .sh linux
  • .rsync/c/blitz
    .sh linux
  • .rsync/c/blitz32
    .elf linux x86
  • .rsync/c/blitz64
    .elf linux x64
  • .rsync/c/go
    .sh linux
  • .rsync/c/run
    .sh linux
  • .rsync/c/start
    .sh linux
  • .rsync/c/stop
    .sh linux
  • .rsync/init
  • .rsync/init0
  • .rsync/init2
  • .rsync/initall