Overview
overview
10Static
static
1027960730119663739
ubuntu-18.04-amd64
27960730119663739
debian-9-armhf
27960730119663739
debian-9-mips
27960730119663739
debian-9-mipsel
32825050225637941
debian-9-mips
735616602442412040
debian-9-armhf
640378277128495512
ubuntu-18.04-amd64
40378277128495512
debian-9-armhf
40378277128495512
debian-9-mips
40378277128495512
debian-9-mipsel
45331149853509989.apk
android-9-x86
145331149853509989.apk
android-10-x64
145331149853509989.apk
android-11-x64
156618521379097511
debian-12-armhf
799971917023891412.exe
windows7-x64
1099971917023891412.exe
windows10-2004-x64
10Behavioral task
behavioral1
Sample
27960730119663739
Resource
ubuntu1804-amd64-20240611-en
Behavioral task
behavioral2
Sample
27960730119663739
Resource
debian9-armhf-20240729-en
Behavioral task
behavioral3
Sample
27960730119663739
Resource
debian9-mipsbe-20240611-en
Behavioral task
behavioral4
Sample
27960730119663739
Resource
debian9-mipsel-20240611-en
Behavioral task
behavioral5
Sample
32825050225637941
Resource
debian9-mipsbe-20240729-en
Behavioral task
behavioral6
Sample
35616602442412040
Resource
debian9-armhf-20240611-en
Behavioral task
behavioral7
Sample
40378277128495512
Resource
ubuntu1804-amd64-20240611-en
Behavioral task
behavioral8
Sample
40378277128495512
Resource
debian9-armhf-20240729-en
Behavioral task
behavioral9
Sample
40378277128495512
Resource
debian9-mipsbe-20240611-en
Behavioral task
behavioral10
Sample
40378277128495512
Resource
debian9-mipsel-20240418-en
Behavioral task
behavioral11
Sample
45331149853509989.apk
Resource
android-x86-arm-20240624-en
Behavioral task
behavioral12
Sample
45331149853509989.apk
Resource
android-x64-20240624-en
Behavioral task
behavioral13
Sample
45331149853509989.apk
Resource
android-x64-arm64-20240624-en
Behavioral task
behavioral14
Sample
56618521379097511
Resource
debian12-armhf-20240729-en
Behavioral task
behavioral15
Sample
99971917023891412.exe
Resource
win7-20240903-en
Errors
General
-
Target
c01b1e7fdd3f14fd99523c71da4ce97497b4262065a6f29d9251b26cab7e03bb.tar
-
Size
10.2MB
-
MD5
a4d9843cc8166e0543d309cc47e3f46a
-
SHA1
d7612c1831b3321e97d890de0387df12b5c57fa3
-
SHA256
c01b1e7fdd3f14fd99523c71da4ce97497b4262065a6f29d9251b26cab7e03bb
-
SHA512
5a3ee382f32e3e3e5058a56841ab71441f23bf250784563e68fa84c1638bcc5762335432d118b7996c323162f8d8bf980bc1042ccc7ac91f13cc6f871c54afa3
-
SSDEEP
196608:RDH6rsox3zJUEKBHjVoeW3+Jp3wkETTV0wRDByc9YZSrd+TDD:BaQoEHBoeW3Ap3wkoTV0pKYZSZ+Tv
Malware Config
Extracted
gafgyt
255.255.255.255:1900
194.48.250.133:23
Extracted
mirai
hou.zu0x.com
Extracted
mirai
CHARYBDIS
216.219.94.5
216.219.94.57
Signatures
Files
-
c01b1e7fdd3f14fd99523c71da4ce97497b4262065a6f29d9251b26cab7e03bb.tar.tar
-
27960730119663739.elf linux sh
-
32825050225637941.elf linux mipsbe
-
35616602442412040.elf linux arm
-
40378277128495512.elf linux sh
-
45331149853509989.apk android
-
56618521379097511.elf linux arm
-
99971917023891412.exe windows:6 windows x86 arch:x86
5fca035c1d9772fed59e3f04779695b2
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetVersionExA
VirtualQuery
LocalAlloc
LocalFree
GetModuleFileNameW
GetProcessAffinityMask
SetProcessAffinityMask
SetThreadAffinityMask
Sleep
ExitProcess
FreeLibrary
LoadLibraryA
GetModuleHandleA
GetProcAddress
HeapAlloc
HeapFree
ExitProcess
GetModuleHandleA
LoadLibraryA
GetProcAddress
user32
wsprintfA
GetProcessWindowStation
GetProcessWindowStation
GetUserObjectInformationW
gdi32
CreateCompatibleBitmap
advapi32
CredEnumerateA
shell32
ShellExecuteA
ole32
CoInitializeEx
ws2_32
WSAStartup
crypt32
CryptUnprotectData
shlwapi
PathFindExtensionA
gdiplus
GdiplusStartup
setupapi
SetupDiEnumDeviceInterfaces
ntdll
RtlUnicodeStringToAnsiString
wtsapi32
WTSSendMessageW
Sections
.text Size: - Virtual size: 1.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 155KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmp§{� Size: - Virtual size: 2.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.vmp§{� Size: - Virtual size: 1.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.vmpÆþ Size: - Virtual size: 998KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.vmpÆþ Size: 1024B - Virtual size: 604B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmpÆþ Size: 6.5MB - Virtual size: 6.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ