Overview

overview

3

Static

static

3

.post-install

ubuntu-18.04-amd64

1

.post-install

debian-9-armhf

1

.post-install

debian-9-mips

.post-install

debian-9-mipsel

.post-upgrade

ubuntu-18.04-amd64

1

.post-upgrade

debian-9-armhf

1

.post-upgrade

debian-9-mips

.post-upgrade

debian-9-mipsel

.pre-deinstall

ubuntu-18.04-amd64

.pre-deinstall

debian-9-armhf

.pre-deinstall

debian-9-mips

.pre-deinstall

debian-9-mipsel

.pre-install

ubuntu-18.04-amd64

.pre-install

debian-9-armhf

.pre-install

debian-9-mips

.pre-install

debian-9-mipsel

opt/micros...so.2.1

ubuntu-20.04-amd64

1

opt/micros...18.dll

windows7-x64

1

opt/micros...18.dll

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    msodbcsql18_18.3.2.1-1_amd64.apk

  • Size

    958KB

  • MD5

    aea9a8594bdeb7c68c3a1731a6ff733b

  • SHA1

    6e2c3b0fc54a8dc2265ffa1bf746c80bfa4087f9

  • SHA256

    9c703f3359e79aea64e815745700a19a2dce1942f2bb97b7351a5a11369ece99

  • SHA512

    d73b6d459909dcf1fbe902fce3467609bc8a5cbb639bd22d52224795d61412d6d520259696d0c5662a18a0db1803abe3b744a5cdcf28fae39fc365eacc4d2e49

  • SSDEEP

    24576:Qu79d2COJVsC0t8JrMN4F17iM8KEqkP+6kwmibzH9nxgh:Qu79d2C2+C0tcr7FnKRVkYbzH9nu

Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • msodbcsql18_18.3.2.1-1_amd64.apk
    .gz
  • sample
    .tar
  • .PKGINFO
  • .post-install
    .sh linux
  • .post-upgrade
    .sh linux
  • .pre-deinstall
    .sh linux
  • .pre-install
    .sh linux
  • opt/microsoft/msodbcsql18/etc/odbcinst.ini
  • opt/microsoft/msodbcsql18/include/msodbcsql.h
  • opt/microsoft/msodbcsql18/lib64/libmsodbcsql-18.3.so.2.1
    .elf linux x64
  • opt/microsoft/msodbcsql18/share/resources/en_US/msodbcsqlr18.rll
    .dll windows:6 windows x64 arch:x64


    Headers

    Sections

  • usr/share/doc/msodbcsql18/LICENSE.txt
  • usr/share/doc/msodbcsql18/RELEASE_NOTES