General

  • Target

    59d0e54d00ff3e4054586ad1c64ed9cda48ead7be4e4cd8abb3ea4a7f6d8e421.zip

  • Size

    34.6MB

  • MD5

    e6e6316247aef191c116e625a0be59f7

  • SHA1

    e403d2dd7c8971ad300d5fbed68c843e0c1eeac5

  • SHA256

    59d0e54d00ff3e4054586ad1c64ed9cda48ead7be4e4cd8abb3ea4a7f6d8e421

  • SHA512

    5674b6a0cf84d4833b6433319a809d46434e6f77209e35383ffd2f447851fe4396eec7cde004fccfbb4b319a03dd21ca66cce1f8c6104c55a75cd1579b7c774d

  • SSDEEP

    786432:rFnlR5Lqu61Udjsp6caBuj6bmC6khXjSlUdHcXu+27PpOhO4oad15do+Pf/g:rFlRVquaUdgkc2uj6KC6STndaYPcbdrC

Score
1/10

Malware Config

Signatures

Files

  • 59d0e54d00ff3e4054586ad1c64ed9cda48ead7be4e4cd8abb3ea4a7f6d8e421.zip
    .zip
  • SSM/LICENSE
  • SSM/Manifests/AmazonInspector2-InspectorSsmPlugin_126.json
  • SSM/Manifests/AmazonInspector2-InspectorSsmPlugin_126.txt
  • SSM/Manifests/AmazonInspector2-InspectorSsmPlugin_127.json
  • SSM/Manifests/AmazonInspector2-InspectorSsmPlugin_127.txt
  • SSM/Manifests/AmazonInspector2-InspectorSsmPlugin_128.json
  • SSM/Manifests/AmazonInspector2-InspectorSsmPlugin_128.txt
  • SSM/Manifests/AmazonInspector2-InspectorSsmPlugin_129.json
  • SSM/Manifests/AmazonInspector2-InspectorSsmPlugin_129.txt
  • SSM/Manifests/AmazonInspector2-InspectorSsmPlugin_130.json
  • SSM/Manifests/AmazonInspector2-InspectorSsmPlugin_130.txt
  • SSM/Manifests/_arnawsssmpackageawspvdriver_21_66XA4XBKMUL56B6HYCFMNHV3CWSN44PIP4NHKIOMCDJMKGPGJE3A====_8.4.0.json
  • SSM/Manifests/_arnawsssmpackageawspvdriver_21_66XA4XBKMUL56B6HYCFMNHV3CWSN44PIP4NHKIOMCDJMKGPGJE3A====_8.4.1.json
  • SSM/Manifests/_arnawsssmpackageawspvdriver_21_66XA4XBKMUL56B6HYCFMNHV3CWSN44PIP4NHKIOMCDJMKGPGJE3A====_8.4.2.json
  • SSM/Manifests/_arnawsssmpackageawspvdriver_21_66XA4XBKMUL56B6HYCFMNHV3CWSN44PIP4NHKIOMCDJMKGPGJE3A====_8.4.3.json
  • SSM/Plugins/SessionManagerShell/winpty-agent.exe
    .exe windows:6 windows x64 arch:x64

    c5c2f7af66b045bc3972b97b804dc21b


    Code Sign

    Headers

    Imports

    Sections

  • SSM/Plugins/SessionManagerShell/winpty.dll
    .dll windows:6 windows x64 arch:x64

    7c6b9cfe8c0b0ed85ba6cd7589bc988a


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • SSM/Plugins/awsCloudWatch/AWS.CloudWatch.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Code Sign

    Headers

    Imports

    Sections

  • SSM/Plugins/awsCloudWatch/AWS.CloudWatch.exe.config
  • SSM/Plugins/awsCloudWatch/AWS.CloudWatch.log4net.config
  • SSM/Plugins/awsCloudWatch/AWS.EC2.Windows.CloudWatch.Configuration.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • SSM/Plugins/awsCloudWatch/AWS.EC2.Windows.CloudWatch.DataFlowParser.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • SSM/Plugins/awsCloudWatch/AWS.EC2.Windows.CloudWatch.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • SSM/Plugins/awsCloudWatch/AWSSDK.CloudWatch.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • SSM/Plugins/awsCloudWatch/AWSSDK.CloudWatchLogs.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • SSM/Plugins/awsCloudWatch/AWSSDK.Core.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • SSM/Plugins/awsCloudWatch/AWSSDK.EC2Messaging.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • SSM/Plugins/awsCloudWatch/AWSSDK.S3.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • SSM/Plugins/awsCloudWatch/AWSSDK.SimpleSystemsManagement.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • SSM/Plugins/awsCloudWatch/Common.Logging.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • SSM/Plugins/awsCloudWatch/Ec2Config.Common.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • SSM/Plugins/awsCloudWatch/Ec2Config.Ec2ConsoleLogger.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • SSM/Plugins/awsCloudWatch/Ec2Config.Plugin.Internal.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • SSM/Plugins/awsCloudWatch/Ec2Config.Plugin.Tools.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • SSM/Plugins/awsCloudWatch/Ec2Config.Plugin.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • SSM/Plugins/awsCloudWatch/ICSharpCode.SharpZipLib.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • SSM/Plugins/awsCloudWatch/Jetbrains.Annotations.dll
    .dll .js windows:4 windows x86 arch:x86 polyglot

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • SSM/Plugins/awsCloudWatch/Microsoft.Practices.EnterpriseLibrary.Common.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • SSM/Plugins/awsCloudWatch/Microsoft.Practices.EnterpriseLibrary.Validation.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • SSM/Plugins/awsCloudWatch/Microsoft.Practices.ServiceLocation.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • SSM/Plugins/awsCloudWatch/Microsoft.Practices.Unity.Configuration.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • SSM/Plugins/awsCloudWatch/Microsoft.Practices.Unity.Interception.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • SSM/Plugins/awsCloudWatch/Microsoft.Practices.Unity.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • SSM/Plugins/awsCloudWatch/Newtonsoft.Json.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • SSM/Plugins/awsCloudWatch/Quartz.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • SSM/Plugins/awsCloudWatch/SmartThreadPool.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • SSM/Plugins/awsCloudWatch/System.Threading.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • SSM/Plugins/awsCloudWatch/log4net.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • SSM/Plugins/awsDomainJoin/AWS.DomainJoin.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Code Sign

    Headers

    Imports

    Sections

  • SSM/Plugins/awsDomainJoin/AWS.DomainJoin.exe.config
  • SSM/Plugins/awsDomainJoin/AWSSDK.Core.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • SSM/Plugins/awsDomainJoin/AWSSDK.DirectoryService.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • SSM/Plugins/awsDomainJoin/AWSSDK.EC2Messaging.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • SSM/Plugins/awsDomainJoin/AWSSDK.S3.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • SSM/Plugins/awsDomainJoin/AWSSDK.SimpleSystemsManagement.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • SSM/Plugins/awsDomainJoin/Common.Logging.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • SSM/Plugins/awsDomainJoin/Ec2Config.Common.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • SSM/Plugins/awsDomainJoin/Ec2Config.Ec2ConsoleLogger.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • SSM/Plugins/awsDomainJoin/Ec2Config.Plugin.Internal.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • SSM/Plugins/awsDomainJoin/Ec2Config.Plugin.Tools.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • SSM/Plugins/awsDomainJoin/Ec2Config.Plugin.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • SSM/Plugins/awsDomainJoin/Ec2ConfigLibrary.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • SSM/Plugins/awsDomainJoin/FluentCommandLineParser.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • SSM/Plugins/awsDomainJoin/Heijden.Dns.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • SSM/Plugins/awsDomainJoin/ICSharpCode.SharpZipLib.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • SSM/Plugins/awsDomainJoin/Interop.NetFwTypeLib.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • SSM/Plugins/awsDomainJoin/JetBrains.Annotations.dll
    .dll .js windows:4 windows x86 arch:x86 polyglot

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • SSM/Plugins/awsDomainJoin/Microsoft.Practices.EnterpriseLibrary.Common.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • SSM/Plugins/awsDomainJoin/Microsoft.Practices.EnterpriseLibrary.Validation.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • SSM/Plugins/awsDomainJoin/Microsoft.Practices.ServiceLocation.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • SSM/Plugins/awsDomainJoin/Microsoft.Practices.Unity.Configuration.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • SSM/Plugins/awsDomainJoin/Microsoft.Practices.Unity.Interception.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • SSM/Plugins/awsDomainJoin/Microsoft.Practices.Unity.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • SSM/Plugins/awsDomainJoin/Newtonsoft.Json.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • SSM/Plugins/awsDomainJoin/Quartz.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • SSM/Plugins/awsDomainJoin/SmartThreadPool.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • SSM/Plugins/awsDomainJoin/System.Threading.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • SSM/Plugins/awsDomainJoin/log4net.config
  • SSM/Plugins/awsDomainJoin/log4net.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • SSM/amazon-ssm-agent.exe
    .exe windows:6 windows x64 arch:x64

    c2d457ad8ac36fc9f18d45bffcd450c2


    Code Sign

    Headers

    Imports

    Sections

  • SSM/amazon-ssm-agent.json.template
  • SSM/seelog.xml.template
  • SSM/ssm-agent-worker.exe
    .exe windows:6 windows x64 arch:x64

    c2d457ad8ac36fc9f18d45bffcd450c2


    Code Sign

    Headers

    Imports

    Sections

  • SSM/ssm-cli.exe
    .exe windows:6 windows x64 arch:x64

    c2d457ad8ac36fc9f18d45bffcd450c2


    Code Sign

    Headers

    Imports

    Sections

  • SSM/ssm-document-worker.exe
    .exe windows:6 windows x64 arch:x64

    c2d457ad8ac36fc9f18d45bffcd450c2


    Code Sign

    Headers

    Imports

    Sections

  • SSM/ssm-session-logger.exe
    .exe windows:6 windows x64 arch:x64

    c2d457ad8ac36fc9f18d45bffcd450c2


    Code Sign

    Headers

    Imports

    Sections

  • SSM/ssm-session-worker.exe
    .exe windows:6 windows x64 arch:x64

    c2d457ad8ac36fc9f18d45bffcd450c2


    Code Sign

    Headers

    Imports

    Sections