Overview

overview

3

Static

static

1

env.sh

ubuntu-18.04-amd64

1

env.sh

debian-9-armhf

1

env.sh

debian-9-mips

env.sh

debian-9-mipsel

post-install.sh

ubuntu-18.04-amd64

1

post-install.sh

debian-9-armhf

1

post-install.sh

debian-9-mips

post-install.sh

debian-9-mipsel

post-uninstall.sh

ubuntu-18.04-amd64

1

post-uninstall.sh

debian-9-armhf

1

post-uninstall.sh

debian-9-mips

post-uninstall.sh

debian-9-mipsel

pre-install.sh

ubuntu-18.04-amd64

1

pre-install.sh

debian-9-armhf

1

pre-install.sh

debian-9-mips

pre-install.sh

debian-9-mipsel

pre-uninstall.sh

ubuntu-18.04-amd64

1

pre-uninstall.sh

debian-9-armhf

1

pre-uninstall.sh

debian-9-mips

pre-uninstall.sh

debian-9-mipsel

start-stop.sh

ubuntu-18.04-amd64

3

start-stop.sh

debian-9-armhf

1

start-stop.sh

debian-9-mips

start-stop.sh

debian-9-mipsel

bin/gnugo

ubuntu-18.04-amd64

1

bin/gtp-rhino

ubuntu-18.04-amd64

1

bin/quarry

ubuntu-20.04-amd64

3

modify.sh

ubuntu-18.04-amd64

1

modify.sh

debian-9-armhf

1

modify.sh

debian-9-mips

modify.sh

debian-9-mipsel

run_gnugo.sh

ubuntu-18.04-amd64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    0010_999_1496121336_gnugo_3.8.0.r4_x86-64.apk

  • Size

    2.3MB

  • Sample

    240521-gerhpaef9w

  • MD5

    3d118b9a150d9a6203489171b5727f0e

  • SHA1

    8004f72f4c9f22d757c906ccd9148e181ff15dbe

  • SHA256

    720f1cb55e696c60dac7e83df08334577512a1827a69d686ae551a5d95bdd870

  • SHA512

    4b85a17617f6143fede9cd32c4813f7cd44ecdbd37842b8c4b619784ed92a62d275bda16a2309e8b550938fc15021d4b89cab59d225089b734e3618cca875a44

  • SSDEEP

    49152:fes1Lnlbmttlttntt+ttLttq27tte4NgHJAB9jctyjpzUUrMGrVyc/GOaH2E7jrs:f19q4N4J3t0pzU4Ic/+2E7jroj

Score
3/10
linux

Malware Config

Targets

    • Target

      env.sh

    • Size

      775B

    • MD5

      bb2a9aa999d92f96329f68061db62ec7

    • SHA1

      7e20a230585a1085cf92a3dd01b320c69f5f53d0

    • SHA256

      01eac80519d2f3e93b588def8244ec0d910c742ce65a595b2762161a127f60e7

    • SHA512

      d6a22f6dff6c489b0f246baefa3b6af5970ff6574685ac15a0f37fcea6aa4e56d1eab466992f87670f80dae306438bb60cc059776900e93c743ce1d1b38a8ff7

    Score
    1/10
    behavioral1behavioral2behavioral3behavioral4

    • Target

      post-install.sh

    • Size

      227B

    • MD5

      836ed078c0fd8f0e7db08fc2f6383505

    • SHA1

      eb10b96e935cfee1b9b8cd996173093fb8059de3

    • SHA256

      72952391a411a19fa90fa7dafb5264ce4f3d96f0a97157a85a876c4bd9c85087

    • SHA512

      2d01aa2c1d365d0ee6b02c3398f51332aeaa60e40a59d55246fedf636c37d14aefd8f6af2f72d12a1d2926f0f58ef1d0eb24e4230a4c785615fc1e16a2908d3e

    Score
    1/10
    behavioral5behavioral6behavioral7behavioral8

    • Target

      post-uninstall.sh

    • Size

      34B

    • MD5

      5ef98f52d2169fbcbdb8cbf407161310

    • SHA1

      2360274d76d8f9fb72cc65a12b87eab298b94ebd

    • SHA256

      758c4943f30ba91e5fe42e352bacd4bcdb8695831b2119ac5e9633c31fd2b1c2

    • SHA512

      556d37f719365ec555602a1dfdf4c2797a04b70c7ff580879410f1b8ac2216fde94195ccc7adba356d5a7b087d47db7019c69d2f857ae554404f60bd9f169605

    Score
    1/10
    behavioral10behavioral11behavioral12behavioral9

    • Target

      pre-install.sh

    • Size

      187B

    • MD5

      4bcc25edcec53e782cd97e45f9f934af

    • SHA1

      0bad5e54231805ca1f747decdfa7eb4e73856727

    • SHA256

      1af7ee706fd8eb43e70b2af0562ca5579a4bb09f3ed4bfb82f325fdba50102a3

    • SHA512

      18ce2973bcd7cdb8bd90d8603e49602326ef4c84096b4ad9f1a48dab737692ab3e4fb98cfb5ea59ee3096de6eebc30eabbd255a93dffc7bd05f9416578ee81dd

    Score
    1/10
    behavioral13behavioral14behavioral15behavioral16

    • Target

      pre-uninstall.sh

    • Size

      33B

    • MD5

      96f170529decbecdb7f8fe8c7d22d0e2

    • SHA1

      7c90b4eda42f69b52ce765ffa0c82fd6f528a8bc

    • SHA256

      deea1ef0e1092e64befdbef086b0fa63d59b2b5882397331f73362d320092faa

    • SHA512

      838c1fdff63abbe0641f935a4cfc561604264679bb3f22dc21315f94ecb0482733db6debc40a21ef1ba9924c4391fbcc7ec2d3d143efc0239e37585e20d0af29

    Score
    1/10
    behavioral17behavioral18behavioral19behavioral20

    • Target

      start-stop.sh

    • Size

      2KB

    • MD5

      03af8e035fb162fe56f537954f3a0fd1

    • SHA1

      866707694365621fbf681414dd8b0ca1f5408fd7

    • SHA256

      579921097bd37ba2a35e08b5e1cde50c2e0e8d3b9aa35ab9696f6efb8858482e

    • SHA512

      ee2ad6862305ad21ea3fa5c714f9f3d7f7175e7b622158686d7f4c53d9c5f07925a7067e3f11c69d27fd2210a4e97ce9a45d5b3b9d82c7cbc490af455aa66c4e

    Score
    3/10
    behavioral21behavioral22behavioral23behavioral24

    • Target

      bin/gnugo

    • Size

      6.5MB

    • MD5

      14ee39f36d3a3852a8109fd32beaadf6

    • SHA1

      0c8d66a23766258479054cb7b6acff7ef4f2206a

    • SHA256

      f1a10d8c94bc56b51284bee5eadf449e4eb073140d87a456caa4e5b9faf38b0a

    • SHA512

      e352b5e05481cda3401b0c6ef7a0b0b30d04239c8b60c9b431719b27a094d2c07a889363984fa25b771f15d08e6eee5efca37e7f6a38ef61ec1aa747ee2518fa

    • SSDEEP

      49152:jc+5qTN+1rWRQ7Nyylr44DmkF4rbe6pAt5ShD9mkwzKPiB:jVQTN+1rW67Nyylr44DmMRSq5B

    Score
    1/10
    behavioral25

    • Target

      bin/gtp-rhino

    • Size

      136KB

    • MD5

      17b8907c88b11768136612ff2512cd07

    • SHA1

      f016e6b7a53ccf9c8fcb4b3b83df4745a3edc5ff

    • SHA256

      eeddfcf43a49b2150694dbc8d5f8164ae15da91de7ff2acbae737303e6edf61d

    • SHA512

      25989aaaa04249dba48e41619cc15f5ad716879006c6f44085ca270a6c008006fe1cf47dd97f7c060cfed4393a62524b25b9cec0c3eb489a6ad8acb61114d7cb

    • SSDEEP

      1536:1iDTRHLJpXg1YAtD4g6O7uP7aN+PPoyTLLw5ga8kmTQr57jomVllMxTSls32mSr6:IDkJ+PTBLopFax6lY1oP/Jptv

    Score
    1/10
    behavioral26

    • Target

      bin/quarry

    • Size

      504KB

    • MD5

      dcfe5e5860e8e8b1eeb53f4ab716f2d9

    • SHA1

      66a86cefff8e98bece1f391a3c83da5c6daf0d34

    • SHA256

      3b4e19dbdc8b5249aa37140c5e6847c75bf6823ad7f8f3a05933e0722f063a53

    • SHA512

      29d27fba7ecb0351bf424f06b983d629001011dd268c235a8e114dc93a2bf4e710602b5452be1b1257fe5bf55eb45cac84f46286ed323a492cb207c17202a30b

    • SSDEEP

      6144:rl2hP16Xn5mPuAn8fMd+ZP49IXNdic+rtBIHHuH2WIfgb266mXaIuHrvCv5ujLJ:rl2kwPt8BX5VqOfH3zQvY

    Score
    3/10
    behavioral27

    • Target

      modify.sh

    • Size

      1KB

    • MD5

      15d512963e0d7995ea9c40c8d81ffa58

    • SHA1

      220aa9f686e00394142258d6e4f984b00eb0ffeb

    • SHA256

      9192f8f024e096cdeb76fc0dcb7f5a100732f36c268f04f7ccda673c8c3cb6a9

    • SHA512

      e41537bcc5a957f1f35be89c261747f2df95e50b1fec6c7b165611026a7492c3fb9b4ab3f7541523429447eeb2c3493fc277ec67f063393f983308111f736f7f

    Score
    1/10
    behavioral28behavioral29behavioral30behavioral31

    • Target

      run_gnugo.sh

    • Size

      1KB

    • MD5

      edd621193388733ebf626fe29ec439a9

    • SHA1

      5573e537cba1a0fe6b82ebb39e8fe6359ddf5519

    • SHA256

      be516df75b6f4c3ff1570435705f7b4fd8da54491449d703005d36e43696d5c4

    • SHA512

      332a681dcd9c5f43ae2c83e05d6e6a18dceb39a17764df2c48601ca65e4cc56511fc50a3a80000f01fa6b1a80f81821cc06cfbdd050d26f7699d5982365724f2

    Score
    1/10
    behavioral32

MITRE ATT&CK Matrix

Tasks